O quanto de informação pessoal e íntima divulgamos nas mídias sociais de forma espontânea e despreocupada? Continue reading on Medium »  ( 3 min )

Thirteen. Unlucky for some. Let’s see how you could solve Hacktoria’s practice challenge: Geolocation 13. I confess I was very excited… Continue reading on Medium »  ( 3 min )

submitted by /u/chicksdigthelongrun [link] [comments]

submitted by /u/jafarlihi [link] [comments]  ( 1 min )

Hey there! My name is Faizan and this write up is about an interesting Stored XSS I found earlier today! If you know what an XSS aka Cross… Continue reading on Medium »  ( 1 min )

A restricted browser, that’s all you have… what do you do? Continue reading on Medium »  ( 3 min )

Burp Suite is an intercepting tool which can be used to capture and manipulate all of the data traffic between Client and Server. This… Continue reading on Medium »  ( 2 min )

A Feature that almost broke Google Groups !! Continue reading on InfoSec Write-ups »  ( 3 min )

Hello Everyone, This is Abhishek Kashniyal, I am a CSE student with specialization in Cyber Security & Forensics, a constant learner and… Continue reading on Medium »  ( 2 min )

What is Algolia? Continue reading on Medium »  ( 1 min )

http://djbloom.info/Music/My%20Music/ submitted by /u/CalmWater8439 [link] [comments]  ( 1 min )

Just what the title says. I have some music, movies, documents, etc that I'd like to share, but I don't want to take up or make an entire Google Drive account just for some files. Any help getting started would be greatly appreciated! submitted by /u/Reggie_Smith_89 [link] [comments]  ( 4 min )

what would a company look for when hiring junior infosec analysts? i just started as a junior help desk technician and i hear that experience is better than certs i just want to get an idea of what a company will look for when hiring a junior infosec analyst also is it possible to go from help desk to infosec? submitted by /u/Jkarl0880 [link] [comments]  ( 1 min )

I pivoted from a technical security role to a customer facing technical/management role for a cybersecurity SaaS company a couple years ago. I’ve been considering getting back into the security engineering/architect side of things. One area I’m finding seems to be a requirement for most roles is experience in cloud security like mastery of AWS. I’m also noticing requirements for experience in container tools such as Kubernetes. This isn’t experience I can gain on the job right now. Any suggestions on how I can get experience that matters for these technologies? I don’t want to fall behind and lose any chance of working in a direct security role again submitted by /u/7heJoker [link] [comments]  ( 1 min )

Anybody by some chance has some sources on the new CVE of score 10 impacting SAP NetWeaver? I can't find any details of the specific vulnerable mechanism that allowed the request smuggling. Thanks :) submitted by /u/Altiverses [link] [comments]  ( 1 min )

Trying to learn reverse-engineering and binary exploitation and I came across this playlist, Watched a few videos but didn't got a thing, it feels like I'm missing some knowledge gaps in between, Can someone please give me a clear roadmap so that I can start using Radare2? ​ Edit: after radare, I wanna learn Ghidra lol submitted by /u/The_Intellectualist [link] [comments]  ( 2 min )

I have recently interviewed for an entry-level SOC role, and my expectation is a bit mixed. It is a cybersecurity company that provides services such as SIEM monitoring, pen-testing, threat hunting, etc. The X company has 5 people, including the CEO and CTO. And around 300 customers. The role is to sit with the SOC team, check alerts, and then give customers a summary each quarter of what happened within that period. The job title was listed as a cyber security engineer, and the job description mentioned Analysis of security incidents Incident Response Teams Threat Hunting Security advice During the interview, they asked me two times specifically how I felt about giving security advice to customers, is it normal that the junior SOC gives security advice to customers? Or is this a good way to get into the "cyber world", then apply for new jobs after 1 year? Going to graduate with my BS this summer, so trying to land a job before I graduate. submitted by /u/PapiPoseidon [link] [comments]  ( 1 min )

今日暂未更新资讯~ 更多最新文章，请访问SecWiki  ( 2 min )

"Telegram for iOS: Access and decode secret chats which can only be accessed on their devices of origin. You can also recover deleted messages." im in too deep this forensic thingy is kinda exciting and im in a business major. I guess one can really recover deleted telegram chats using cellebrite! amazing submitted by /u/b4dboyrere [link] [comments]  ( 1 min )

What kind of data are included in apple icloud productions ? do they include permanently deleted files notes, media? submitted by /u/b4dboyrere [link] [comments]  ( 1 min )

hello friends to make things short, I am an IT Auditor with 1.5 years of experience, and I hate the part of dealing with people in IT Audit. but its very essential to deal with people there. so decided to jump to forensics, do you people deal with humans or simply have to worry about machines and that is it? and, i am cisa certified, will that help? what certification do you suggest taking for computer forensics? and how is the pay for IT Audit vs Computer forensics? in short, do you recommend the shift or not? thx submitted by /u/ItchyPilot9804 [link] [comments]  ( 2 min )

Mattermost disclosed a bug submitted by rynexxx: https://hackerone.com/reports/1442017 - Bounty: $50

Article URL: https://www.thecybersecuritytimes.com/the-red-cross-data-breach-exploited-a-manageengine-vulnerability-by-apt27/ Comments URL: https://news.ycombinator.com/item?id=30403952 Points: 1 # Comments: 1  ( 4 min )

A short article outlining the phases to go through, while planning a red team engagement. Continue reading on Medium »  ( 2 min )

Article URL: https://ubuntu.com/security/notices/USN-4728-1 Comments URL: https://news.ycombinator.com/item?id=30401324 Points: 1 # Comments: 0  ( 2 min )

Has anyone else come across a printer that was assigned a drive letter? I’ve never seen this in my personal life but it stood out to me while I was working a case. In this instance, it was a Brother printer assigned to D:. Does doing this provide any additional functionality rather than just printing documents? submitted by /u/ebarboza311 [link] [comments]  ( 1 min )

Hi guys what can be the reason to not have a $UsnJrnl on an NTFS filesystem? submitted by /u/Donato_Francesco [link] [comments]  ( 1 min )

Vous souhaitez améliorer vos requêtes lors d’une recherche sur votre concurrent ou sur votre marché ? Continue reading on Medium »  ( 3 min )

Dnstwist is an open-source tool used to identify phishing domains, Typosquatting domains, attack domains, and brand impersonate. Dnstwist… Continue reading on Medium »  ( 1 min )

And back again with another Hacktoria Geolocation challenge to solve. I love GEOINT challenges, especially when they force me to learn… Continue reading on InfoSec Write-ups »  ( 6 min )

I keep getting these notifications without me trying to install any new device or driver. I would like to know what is the source of this? I tried to look into my event viewer without success. submitted by /u/ak_z [link] [comments]  ( 1 min )

Thank you. submitted by /u/jacobspartan1992 [link] [comments]  ( 1 min )

Hey Chief, I'm trying to get ahead in reversing binaries, and I really ain't got any idea about which framework should I pick up first, Can you help? submitted by /u/The_Intellectualist [link] [comments]  ( 2 min )

Why SOC 2 report are made by CPA ? For SOC 1 I get it, but not SOC 2. How can they audit IT security being accountant? submitted by /u/Xctzn [link] [comments]  ( 2 min )

Introduction Print Spooler has been on researcher’s radar ever since Stuxnet worm used print spooler’s privilege escalation vulnerability to spread through the network in nuclear The post Windows Privilege Escalation: PrintNightmare appeared first on Hacking Articles.  ( 9 min )

今日暂未更新资讯~ 更多最新文章，请访问SecWiki  ( 2 min )

TL;DR This blog post takes a brief look at how to use JXA (native JavaScript for Automation on macOS) to query Spotlight APIs. In… Continue reading on Medium »  ( 3 min )

Attacktive Directory is a box hosted on Try Hack Me. This is medium rated box, but great for any new Red Team Member or penetration… Continue reading on Medium »  ( 2 min )

Local File inclusion Continue reading on System Weakness »  ( 3 min )

Bir web uygulamasında kullanılan veriler dış bir kaynak aracılığıyla alınıyorsa ve saldırgan web sunucusunun göndermiş olduğu istek… Continue reading on Medium »  ( 7 min )

submitted by /u/ly4k_ [link] [comments]

submitted by /u/ly4k_ [link] [comments]  ( 1 min )

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]

submitted by /u/digicat [link] [comments]

Article URL: https://github.com/libexpat/libexpat/blob/R_2_4_5/expat/Changes Comments URL: https://news.ycombinator.com/item?id=30393397 Points: 1 # Comments: 0  ( 21 min )

submitted by /u/markcartertm [link] [comments]  ( 1 min )

submitted by /u/Tradition_Wonderful [link] [comments]

submitted by /u/0xdea [link] [comments]  ( 1 min )

submitted by /u/d_o_d_o_ [link] [comments]  ( 1 min )

submitted by /u/digicat [link] [comments]

submitted by /u/hashput1n [link] [comments]

How is working for a computer forensics job like? Is it easy as simple as just plugging a hard drive or phone or anything that needs data recovery to retrieve data back or is it much harder and more work? Just wondering because i am a computer science major currently a freshman I might want to do computer forensics because it interests me. submitted by /u/Ill-Date-1852 [link] [comments]  ( 2 min )

I know when u delete something, it never really gets deleted. So just curious, where does cleared browsing history for chrome/safari go to? and are we able to retrieve it? submitted by /u/b4dboyrere [link] [comments]  ( 1 min )

I have recently graduated from college with a Bachelors in df but the school I went to really was more geared towards what police officers deal with (like criminal activity and all). How should I really go about learning more of the incident response side of forensics? Any good references to YouTube channels, textbooks, websites, etc is much appreciated! submitted by /u/JunketThat2134 [link] [comments]  ( 5 min )

eLearnSecurity Certified Penetration Tester eXtreme Continue reading on The Mayor »  ( 4 min )

In January 20, 2022 Amazon AWS has introduced a new threat detection in GuardDuty to block credential exfiltrations. Can be bypassed? Continue reading on Dev Genius »  ( 4 min )

In January 20, 2022 Amazon AWS has introduced a new threat detection in GuardDuty to block credential exfiltrations. Can be bypassed? Continue reading on Medium »

So there's an album I'm wanting to download from an OD (Queen's complete Platinum Collection which includes over 200 mins of music) and I'm wanting to know if there is a way to go and bulk download all the files without having to press a link, right click, and click "Save audio as..." every time. submitted by /u/Raven_Claw7621 [link] [comments]  ( 1 min )

https://fichiers.meca.polymtl.ca/?hidden submitted by /u/CalmWater8439 [link] [comments]

submitted by /u/SpaceOtterMafia [link] [comments]  ( 1 min )

Greetings! I am currently new to the ussage of open directories and have been wondering how to limit my results for a movie for example to only my language. I am useing the "all resourves i know" guide to construct my searches. Example: intext:"Search Term" intitle:"index.of" +(wmv|mpg|avi|mp4|mkv|mov) -inurl:(jsp|pl|php|html|aspx|htm|cf|shtml) The Guide: https://www.reddit.com/r/opendirectories/comments/933pzm/all_resources_i_know_related_to_open_directories/ submitted by /u/TwinkleTheToothFairy [link] [comments]  ( 1 min )

Article URL: https://jetpack.com/2022/02/17/severe-vulnerability-fixed-in-updraftplus-1-22-3/ Comments URL: https://news.ycombinator.com/item?id=30391454 Points: 1 # Comments: 1  ( 4 min )

Article URL: https://lwn.net/Articles/885195/ Comments URL: https://news.ycombinator.com/item?id=30381169 Points: 2 # Comments: 0  ( 10 min )

Guys! This room it’s great and I had a lot of fun, with this room you can learn this: Continue reading on System Weakness »  ( 2 min )

Hey fella hunters, hope you all are doing fine. This is my first ever blog, I will try to keep it as much simple as possible spilling as… Continue reading on Medium »  ( 4 min )

السلام عليكم معاكم اخوكم ناصر , بسبب دعمكم السابق لي قررت اكتب هذي المقالة Continue reading on Medium »  ( 1 min )

tl;dr — Bug Zero is a Sri Lanka based Bug Bounty platform and is here to help secure your organization from cybersecurity threats. Continue reading on Bug Zero »  ( 2 min )

tl;dr — Bug Zero is a Sri Lanka based Bug Bounty platform and is here to help secure your organization from cybersecurity threats. Continue reading on Bug Zero »  ( 5 min )

Continue reading on Medium »  ( 2 min )

Арыгінал:https://firefly.exchange/blog/results-from-firefly-security-audits Continue reading on Medium »  ( 2 min )

How much one can earn on Bug Bounty? Continue reading on Medium »  ( 1 min )

Hey fellow hackers and Bug hunters, Continue reading on InfoSec Write-ups »  ( 2 min )

Starswap is already live on Starcoin’s test network, barnard, as the first step in realizing our ambitious vision of a fully functional… Continue reading on Medium »  ( 1 min )

VK.com disclosed a bug submitted by executor: https://hackerone.com/reports/1343528 - Bounty: $3000

I am just looking around to see if there are any more frameworks I can use to harden our systems. I have already been using the STIG and CIS tools and are about 85% compliant on both. Are there any more free resources I can use to scan against our machines to see if there is anything else I can do to harden them? Thanks submitted by /u/KillingRyuk [link] [comments]  ( 2 min )

So, a friend of mine is in Cybersecurity. I study Cybersecurity and am less advanced in my journey than he is. He's very much into fraud, malware, spyware, etc. So, a few background things - I have anorexia nervosa. He knows this. We have been friends for over 3 years now. We are friends with benefits. We are both meth addicts and I'm heavily dependant on weed. I have an album on my phone containing all my bodychecks. It is stored in the main SD card directory. I have a Samsung Galaxy S20 5G, running Android 11. So one day, he invited me over to record a sex tape. Okay, whatever. So I went to his house, ended up sucking his dick, he finishes. We chat for a bit, I'm in his loungeroom on his couch for a an hour or so. At one point early on I mention that I am downloading a large file onto my phone. He asks if I want to use his Wi-Fi, and I accept. When I'm connecting, he convinces me to use my phone MAC address. Okay. I try to browse the Internet while I wait but the connection is garbage. I recieve a text from our other friend who wants to buy weed off me. He immediately ushers me out the door despite suggestions of a Round 2 earlier. Later that night, I notice that when posting to my Instagram, all the recent photos are my bodychecks. Despite me not having touched that folder at all in the past six months. All the photos are there, twice - in my recent photos and where they originally were. I cannot find any duplicate albums on my phone that would cause this. This all happened last week, but the files were modified again last night. Should I be worried? submitted by /u/856850835 [link] [comments]

So I'm working on a security project now and we have a bunch of issues that need fixing over a number of areas and I need a way of prioritising these items and showing that the security of the system is improving. Normally you would use CVSS to calculate this however this program won't be dealing with just vulnerabilities in the product but also in operations and governance. How do you prioritise updating a library in your product with an RCE against a GDPR issue or an internal tool with weak password policies? Also how do you score the system overall to show that fixing these issues has improved the overall security posture? submitted by /u/dbxp [link] [comments]  ( 1 min )

利用IP分片污染攻击TCP流量 by ourren “红蓝对抗演练评分系统”开源框架 (preview) by ourren Web框架CSRF防御的有效性 by ourren PRIVGUARD：用于GDPR隐私合规的数据治理框架 by ourren 中间商之 Ntlm Relay 攻击分析 by ourren 网络安全工作你必须懂的"3保1评" by ourren 更多最新文章，请访问SecWiki  ( 2 min )

Hacktoria: Geolocation 10 (Walkthrough) Continue reading on Medium »  ( 2 min )

Hacktoria: Geolocation 10 (Walkthrough) Continue reading on Medium »  ( 1 min )

On Jan 24, 2022, Quiztime (contributor @bayer_julia) shared a new OSINT quiz with us. The objective was simple. We had to figure out when… Continue reading on Medium »  ( 2 min )

Did every wonder what a piece of foreign text means on a sign, banner, or in a video. Sure you can type it into google translate or speak… Continue reading on Medium »  ( 2 min )

Demonstrating web application compliance with various security standards and practices is crucial in many industries. To help you scan applications and prepare reports for common web security compliance requirements, Netsparker by Invicti comes with a host of predefined compliance checks and reports, including OWASP Top 10, PCI DSS, HIPAA, NIST SP 800-53, and more. READ MORE  ( 7 min )

Infosec Writeups is Organizing Our First Virtual Conference and Networking Event — and we want you to be a part!  ( 3 min )

This write-up is based on Cyberdefenders Qradar101 challenge from Ali Alwashali.  ( 7 min )

Hey fellow hackers and Bug hunters,  ( 2 min )

Infosec Writeups is Organizing Our First Virtual Conference and Networking Event — and we want you to be a part!  ( 3 min )

This write-up is based on Cyberdefenders Qradar101 challenge from Ali Alwashali.  ( 7 min )

Hey fellow hackers and Bug hunters,  ( 2 min )

Facebook 母公司 Meta 同意支付 9000 万美元，以了结一场十年前的诉讼案件。  ( 1 min )

近日，网络安全研究人员破解了一种名为Kraken的新型僵尸网络。该僵尸网络是基于Golang语言开发的，黑客们正在积极对它进行优化升级。

谷歌周三宣布，计划将隐私沙盒引入安卓系统，以期将既注重隐私、又不会对用户造成干扰的广告技术扩展到移动网络。

物联网恶意软件、加密威胁和加密劫持等都保持了全年的高速增长。  ( 1 min )

乌克兰国家安全机构（SSU）宣称，此次针对乌克兰的网络攻击，是有预谋，有组织、背后有庞大“黑手”的具体行动。  ( 1 min )

黑客利用Microsoft Teams，并在聊天里传播恶意可执行文件。

作为企业的安全部门，确保企业安全稳定运作的同时，如何保护平台数据时代下每个“透明人”的隐私数据安全？

案件指控 meta 使用 cookies 追踪已退出账号的 Facebook 用户。  ( 1 min )

跳蛋、按摩棒是你深夜的好伙伴，它们可能也在偷偷泄露着你的使用数据。  ( 1 min )

In the first blog post of our blog series on Symflower’s Core Technology, we explained how symbolic execution works and how we apply it to… Continue reading on Medium »  ( 5 min )

In the first blog post of our blog series on Symflower’s Core Technology, we explained how symbolic execution works and how we apply it to… Continue reading on Medium »  ( 5 min )

submitted by /u/Can0pen3r [link] [comments]

Article URL: https://jayconrod.com/posts/123/internals-of-go-s-new-fuzzing-system Comments URL: https://news.ycombinator.com/item?id=30380994 Points: 2 # Comments: 0  ( 6 min )

Poll View Poll submitted by /u/themariocrafter [link] [comments]  ( 1 min )

Hi Just wondering if any enterprise size companies are running sysmon on workstation and/or servers and forwarding the event to some sort of logger/SIEM? What are the pros and cons? submitted by /u/antmar9041 [link] [comments]  ( 1 min )

I have a PDF that consists of ~27,000 pages and >42,000 images (it's a Cellebrite extraction report from an iPhone). I need to know how many of the images are "adult" in nature. I know Google (https://cloud.google.com/vision/docs/detecting-safe-search) and Microsoft (https://docs.microsoft.com/en-us/azure/cognitive-services/computer-vision/concept-detecting-adult-content) both have "A.I." based image filtering API's that can automatically scan images and find adult/gore/explicit images, but I'm not aware of any software that leverages these technologies (or something similar). What I'm looking for: 1. The best way to dump this many images from a PDF file, and 2. The best way to scan that dump for explicit images (or a way to just scan the PDF file directly and skip dumping the images). submitted by /u/agrowland [link] [comments]  ( 3 min )

Vehicle information can be fantastic tool for investigators to scrutinize and track a real world target, but what OSINT opportunities can… Continue reading on Medium »  ( 2 min )

Hacktoria: Geolocation 14 (Walkthrough) Continue reading on Medium »  ( 3 min )

Hacktoria: Geolocation 14 (Walkthrough) Continue reading on Medium »  ( 2 min )

One day, when I was surfing the internet, my twitter push me a tweet, lets see what does the tweet write: Continue reading on Medium »  ( 2 min )

The best tool to (correctly!) identify a vehicle’s brand and model using AI. Continue reading on Medium »  ( 2 min )

Currently the company I work for sends sensitive documents over email.They Password protect them but then send the password also using email format. submitted by /u/Linux98 [link] [comments]  ( 3 min )

My mom and I in the process of trying to buy an apartment together. Mom will put it under my name. This is first time im doing this and she told me i needed to email my SSN to the loan officer. I have protonmail which is secure mail and is encrypted email. Would it be safe to send my SSN over email to the loan officer in this case since she would need it to open my credit report. I do not know if the officer loan email is encrypted or not Or should i give her my SSN in another way such as telling her on the phone call to be on the safe side? or would be email be just fine? submitted by /u/Wastedmess [link] [comments]  ( 3 min )

NIST states in NIST Special Publication 800-63B under section 5.1.1.2 Memorized Secret Verifiers that: "Verifiers SHOULD NOT impose other composition rules (e.g., requiring mixtures of different character types or prohibiting consecutively repeated characters) for memorized secrets. Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically). However, verifiers SHALL force a change if there is evidence of compromise of the authenticator. " I'm a real stickler and was wondering if anyone knows what main research papers or investigations made them come to the recommendations above? Additionally are there any respected research authority on these type of questions in IT-sec? Thanks! submitted by /u/someuserman [link] [comments]  ( 3 min )

Just got my company phone and it’s brand new in the sealed manufacturers box and even has the carriers sticker on it still. Is there any possible way my company could be monitoring my activity on this phone beyond the calls being made and quantity of texts/data usage? submitted by /u/sektrONE [link] [comments]  ( 3 min )

Red Team testing and Penetration testing are key controls to utilize as part of maintaining a mature security program. There is the… Continue reading on Medium »  ( 5 min )

Article URL: https://blog.qualys.com/vulnerabilities-threat-research/2022/02/17/oh-snap-more-lemmings-local-privilege-escalation-vulnerability-discovered-in-snap-confine-cve-2021-44731 Comments URL: https://news.ycombinator.com/item?id=30378103 Points: 2 # Comments: 1  ( 5 min )

Article URL: https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage/ Comments URL: https://news.ycombinator.com/item?id=30372198 Points: 2 # Comments: 0  ( 9 min )

Article URL: https://blog.qualys.com/vulnerabilities-threat-research/2022/02/17/oh-snap-more-lemmings-local-privilege-escalation-vulnerability-discovered-in-snap-confine-cve-2021-44731 Comments URL: https://news.ycombinator.com/item?id=30378103 Points: 2 # Comments: 1  ( 5 min )

Article URL: https://9to5mac.com/2022/02/17/t2-mac-security-vulnerability-passware/ Comments URL: https://news.ycombinator.com/item?id=30374224 Points: 32 # Comments: 6  ( 4 min )

Ladies and Gentlemen, let’s do some API hacking today. I will discuss some of the top 10 API bugs and where one can find them. Continue reading on Medium »  ( 5 min )

This is my first writeup on how i bypass 403 & accessed the config file Continue reading on Medium »  ( 1 min )

How much money can you make as a bug bounty hunter? That’s the burning question on everyone’s mind, and it’s one that will take some time… Continue reading on Medium »  ( 3 min )

Ryan Pickren, a cyber security student was awarded $100,500 (around 75 lakhs) as a bounty, after he showed Apple how a vulnerability… Continue reading on Medium »  ( 2 min )

In the comments, I was asked what turned out to be more profitable in terms of money as a result — my previous job as a developer or… Continue reading on Medium »  ( 2 min )

submitted by /u/madhuakula [link] [comments]  ( 1 min )

submitted by /u/Alternative_Tour9985 [link] [comments]

submitted by /u/jat0369 [link] [comments]

submitted by /u/monoimpact [link] [comments]  ( 1 min )

submitted by /u/g_e_r_h_a_r_d [link] [comments]

WordPress 生态中恶意插件的大规模研究 by Avenger 2021年工业控制网络安全态势白皮书 by ourren 更多最新文章，请访问SecWiki  ( 2 min )

Zenly disclosed a bug submitted by mega7: https://hackerone.com/reports/1474784 - Bounty: $750

Courier disclosed a bug submitted by musab_alharany: https://hackerone.com/reports/1416701

Challenge Description  ( 3 min )

Hello everyone,  ( 11 min )

Challenge Description:  The Account Executive called the SOC earlier and sounds very frustrated and angry. He stated he can’t access any…  ( 3 min )

Challenge Description  ( 3 min )

Hello everyone,  ( 11 min )

Challenge Description:  The Account Executive called the SOC earlier and sounds very frustrated and angry. He stated he can’t access any…  ( 3 min )

据报道，俄罗斯黑客组织发动对美国CDCs的持续性攻击。  ( 1 min )

即将推出的 Firefox 100和 Chrome 100版本浏览器存在严重风险，在解析包含三位数版本号的用户代理字符串时可能会破坏网站。  ( 1 min )

最近一直在研究thinkphp的框架，今天找了一个cms进⾏审计，发现了两处注入点，由此来进行分析一下。  ( 1 min )

研究机器学习和人工智能系统安全的专家警告称，未来这类系统可能被专业的攻击者所利用。  ( 1 min )

红十字国际委员会（ICRC）最近遭到网络攻击，超过51.5万名“高危人群”的数据被泄露，这很可能是国家支持的黑客所为。  ( 1 min )

本周，安全公司Bishop Fox 的首席研究员从像素化的文本图像中清楚地恢复了其中的字母信息。  ( 1 min )

注：本文转自SDNLAB，仅供查阅 据研究机构 Forrester 称，扩展检测和响应 (XDR) 市场目前还处于早期阶段，现有的  ( 1 min )

Courier disclosed a bug submitted by the_hacker_girl: https://hackerone.com/reports/948345

Since joining multiple analysts have requested some type of training whether it’s vendor specific for tools like the SIEM or vendor neutral training such as SANS but management keeps saying our department is “self-taught” and there is no training budget. Which is odd considering how big of a corporation it is and how successful it is. Personally I’m shocked as the companies I’ve worked for in the past all provided some type of training. How can I make a compelling case for getting our SOC analysts training? submitted by /u/bankster24 [link] [comments]  ( 2 min )

i am a new penetration tester and i want to gather some certifications for me to be able to further my career. however i have observed that cybersecurity certifications are particularly expensive, so like the Certified Ethical Hacker (CEH) certifcation costs 1200 USD which is a lot since i am planning to pay them by myself.. ​ i recently saw elearnsecurity , particularly the eJPT and it only costs 200 USD which i think is great since it shows that i have some real world and hands on capabilities as a penetration tester.. so are there any other certifications like the eJPT which is affordable and credible? preferrably around the same or better if lower price than the eJPT ​ thank you submitted by /u/darkalimdor18 [link] [comments]  ( 3 min )

Looking for some good books to study up on foundational Network Concepts and maybe some stuff that could help me prepare for Network+ submitted by /u/Wintermane45 [link] [comments]

submitted by /u/Real_Score_5035 [link] [comments]  ( 1 min )

Good afternoon, My local department wants to manually check whatsapp messages on a phone. The phone has been in flight mode since we've confiscated it. We ran into the issue that when we want to launch whatsapp it asks to update the whatsapp software. If we want to do this this means that we'll have to hook it up to our wifi network. Does this mean that if the suspect has deleted his messages through whatsapp.web / other phone that this will also be synched with the whatsapp on the phone? I also believe that whatsapp is linked to a phone number. So it would rather be impossible for the suspect to get on his whatsapp without his sim-card(this is in our possesion as well). We also use the UFED cellebrite, but whatsapp conversations don't always come through. So what are our options to be able to get back into whatsapp without loss of data? ​ Thanks! submitted by /u/Tniso [link] [comments]  ( 1 min )

ChainSafe is happy to announce that we’ve been added to the Ethereum Foundation’s consensus layer bug bounty program for Lodestar, our… Continue reading on ChainSafe »  ( 1 min )

Hello guys👋👋 ,Prajit here from the BUG XS Team and Cyber Sapiens United LLP Cybersecurity and Red Team Intern, in this I am regularly… Continue reading on Medium »  ( 2 min )

Hello guys👋👋 ,Prajit here from the BUG XS Team and Cyber Sapiens United LLP Cybersecurity and Red Team Intern, in this I am regularly… Continue reading on Medium »  ( 4 min )

Hello guys👋👋 ,Prajit here from the BUG XS Team and Cyber Sapiens United LLP Cybersecurity and Red Team Intern, in this I am regularly… Continue reading on Medium »  ( 2 min )

Hello guys👋👋 ,Prajit here from the BUG XS Team and Cyber Sapiens United LLP Cybersecurity and Red Team Intern, in this I am regularly… Continue reading on Medium »  ( 3 min )

Publishing my first Security Vulnerability report for LinkedIn.Below is the report that I have submitted to LinkedIn Information Security… Continue reading on Medium »  ( 2 min )

They are right. Persistence is the key ! Continue reading on Medium »  ( 1 min )

Cross-Site Request Forgery (CSRF) is an attack that forces authenticated users to submit a request to a Web application against which they… Continue reading on Medium »  ( 2 min )

Today I will share a Reflected XSS vulnerability that was reported by me and i found this with google dorks… Continue reading on InfoSec Write-ups »  ( 3 min )

Octopus Network 🐙 Continue reading on Medium »  ( 3 min )

submitted by /u/SCI_Rusher [link] [comments]

今日暂未更新资讯~ 更多最新文章，请访问SecWiki  ( 2 min )

How discursus tackled the challenge of introducing ML enrichments in data asset production flows, using Dagster, dbt and Novacene AI. Continue reading on discursus.io »  ( 5 min )

On Dec 22, 2021, Quiztime (contributor @twone2) shared a new OSINT quiz with us. Continue reading on Medium »  ( 1 min )

人是很顽固的一种生物，大部分人成年以后很难改变固有的思维定势。从这个角度来讲，选拔的重要性大于培养。

“开战日”，cctv13 播报中没有出现大规模战争的血腥画面，俄乌双方似乎都陷入了静默的状态。  ( 1 min )

从2022年2月15日下午开始，乌克兰国防部和武装部队以及国有银行遭到DDoS攻击  ( 1 min )

各位FreeBuf的新老朋友大家好，CIS 2021议题来啦~  ( 1 min )

作为互联网世界相关标准的制定、推广的机构，以推动互联网的发展为己任，却也因为网络安全漏洞出现信息被泄露事件，让人颇感尴尬。  ( 1 min )

内容分发网络（CDN）是指一种透过互联网互相连接的电脑网络系统，本文从CDN以及CDN的配置先说起，详解Yak基础插件案例。  ( 3 min )

近日，360安全大脑监测发现一种具有蠕虫性质的新型勒索病毒Coffee存在大范围传播的风险。

实施零信任是作为降低网络风险的有效方式。  ( 1 min )

瑞士Swissport空港服务公司遭勒索软件攻击，一度导致航班延误和服务中断。

昨日下午，乌克兰国防部和武装部队，以及该国的两家国有银行受到了分布式拒绝服务（DDoS）的攻击。

伴随着国内相关法律法规的落地和民众隐私保护意识的觉醒，这个盖子终于捂不住了。当盖子被掀开时，我们需要重新审视这个问题。  ( 1 min )

The key to a successful engagement is well-coordinated planning and communication through all parties involved. This blog post would focus… Continue reading on Medium »  ( 1 min )

Ethical hackers are experienced professionals who find exploitable bugs and report to increase the cybersecurity posture of an… Continue reading on Medium »  ( 1 min )

Introduction Oliver Lyak posted a write-up about a Windows Privilege Escalation vulnerability that persisted in Windows systems even after patching of previous vulnerabilities in Print The post Windows Privilege Escalation: SpoolFool appeared first on Hacking Articles.  ( 8 min )

Today I will share a Reflected XSS vulnerability that was reported by me and i found this with google dorks… Continue reading on InfoSec Write-ups »  ( 3 min )

Once again I am back with a walkthrough to a GEOINT challenge. I will be explaining how to solve Geolocation 11 practice test on…  ( 6 min )

Unlike Google, which scans only for ports 80 & 443, Shodan is the true… Continue reading on InfoSec Write-ups »  ( 3 min )

This lab uses the files Lab01–01.exe and Lab01–01.dll. Use the tools and tech- niques described in the chapter to gain information about…  ( 5 min )

The paper introduces the case study for attack surface analysis and monitoring with practical application of open-source intelligence…  ( 9 min )

Walk-Through  ( 4 min )

Today I will share a Reflected XSS vulnerability that was reported by me and i found this with google dorks… Continue reading on InfoSec Write-ups »  ( 3 min )

Once again I am back with a walkthrough to a GEOINT challenge. I will be explaining how to solve Geolocation 11 practice test on…  ( 6 min )

Unlike Google, which scans only for ports 80 & 443, Shodan is the true… Continue reading on InfoSec Write-ups »  ( 3 min )

This lab uses the files Lab01–01.exe and Lab01–01.dll. Use the tools and tech- niques described in the chapter to gain information about…  ( 5 min )

The paper introduces the case study for attack surface analysis and monitoring with practical application of open-source intelligence…  ( 9 min )

Walk-Through  ( 4 min )

Article URL: https://github.com/trickest/cve Comments URL: https://news.ycombinator.com/item?id=30357373 Points: 104 # Comments: 14  ( 3 min )

Article URL: https://termux.github.io/general/2022/02/15/termux-apps-vulnerability-disclosures.html Comments URL: https://news.ycombinator.com/item?id=30357335 Points: 2 # Comments: 0  ( 9 min )

I have done this before with wget and had no problems, however, I am trying to download this react app and am having a very hard time. For some reason it is only downloading the index.html page and when I click on another tab I get "GET /example" Error (404): "Not found" However, when I run wget on the /example page and grab example.html then it works, but this is not feasible for every page that I need to run. I am calling: wget --random-wait -r -p -e robots=off -U mozilla https://example.com What am I doing wrong / is there a better tool to do this? The site is hosted on Vercel and uses the Next.js framework Any help is much appreciated :) submitted by /u/tokentrader [link] [comments]  ( 2 min )

I was visiting a popular big box store today and was looking at one of their WiFi printers and saw this: https://imgur.com/a/fTZ1Emc Any idea why they are using a public ip range instead of something internal like 192, 172, 10 etc for IP assignments? The netblock according to ARIN belongs to the DoD (https://whois.domaintools.com/7.117.1.1) Just to make sure it wasn't a fluke, I also looked at another device on their network which also had a 7.117 IP. I just thought it was very strange. Any ideas? submitted by /u/LyleTillman [link] [comments]  ( 2 min )

I'm referring to software such is Metasploit, CobaltStrike, Armitage, Ramcos, etc.... submitted by /u/Blagojee [link] [comments]  ( 1 min )

I was wondering if anyone has recently done their burp suite practioner exam cert recently and how relatable it is to their practice test? Is burp suite pro REALLY necessary for the test? Just curious because it's for work and I don't want to pay for pro to not use it. My work has boxes setup with pro so my personal liscense won't be utilized except for the test. submitted by /u/phishingsudo [link] [comments]  ( 1 min )

I'm somewhat new to idevice admin, so please excuse any ignorance. Is it possible to route literally ALL packets from an iPhone through a VPN? We're trying to get some stuff set up and we implemented a VPN by way of a user-installable app. Unfortunately it seems that on iOS there are a lot of connections that bypass this. For example when first connected to a wifi network the iPhone spams a flurry of connections to Apple's servers which don't go through the VPN. I've confirmed this by creating an "evil" wifi network that supports ipv4 only and blocks any connections to the 17.x.x.x range (which is wholly owned and operated by Apple), and even with the VPN active the logs show hundreds of connection attempts persistently. If I also block all Apple domains then half the stuff on the phone no longer works. App-based connections are routed correctly (Safari, etc), but the phone completely ignores the VPN for both DNS lookups and the connections themselves when it comes to system stuff and I'm not sure why. From my research it seems that maybe we need to ditch the app idea and instead implement an "always on" VPN by way of a mobileconfig file. This appears to require the iPhones to be supervised through MDM, which isn't a problem. I've taken a test phone, wiped and supervised it, but I'm having trouble figuring out how to create a mobileconfig that does what we want. Before I burn too many hours messing with this I'm wondering if anyone can help with the following two questions: Will an "always on" VPN on an iPhone actually route ALL packets through the VPN (including the system level phone-home initialization stuff, DNS lookups, ntp, etc) or is this not even the right approach? Assuming (1) is the correct approach, can someone point me to an example mobileconfig file that implements this so I can look at the structure and have a better idea of what I'm doing? submitted by /u/sneakertech [link] [comments]  ( 2 min )

I want an encrypted bootable flash drive which contains 2 LINUX OS. The existence of either OS should be impossible to determine without a password. The flash drive should boot to a BOOTLOADER password prompt. Entering a wrong password should do nothing Entering password A should boot OS A Entering password B should boot OS B After boot of A, it should not be possible to prove the existence of B After boot of B, it should not be possible to prove the existence of A (i.e. if, by booting one of the OS, it is then possible to see that half the flash drive is 'unallocated' then we have probably failed our task) You're already thinking 'plausible deniability' is the phrase im looking for. Yes you're right - thats exactly what I want. I want what Veracrypt can do, but I want it for Linux, not Windows. Is it possible? I've looked at LUKS, but I dont see that it can do what I want. Thanks for any suggestions. submitted by /u/boli99 [link] [comments]  ( 1 min )

We can say you can self study, learn all the material, join a SOC and pray for a promotion, get certifications, etc. I don't see a whole ton of jobs open for DFIR without explicit mention of tools, processes, and experience that one would have to accumulate in one of those sectors that isn't gated by 5-10 years of experience doing it. Additionally, it seems to me that most of the people who are pumping out books and learning material come from some kind of government background where they did incident response. Almost all hiring managers I've met have significant LE experience behind them. What I see much more of is people without this govt background going into pentesting, policy work, etc. Are you pretty much screwed for getting into DFIR at a large corp without a three letter agency or military on the resume? submitted by /u/Different-Area-3053 [link] [comments]  ( 2 min )

Hey y'all! I have a VM that was flagged by Google for potential compromise and being used for crypto mining (the CPU was flat out 50%, continuously for last several days). I immediately took down the machine, snapshotted and imaged it; rotated all security keys for GCP account. I don't think there is any nefarious activity and the compromise was likely to this one machine (or maybe I think that). I would like to find a tool that can show me last logins, various logs, any suspicious software etc. so that I can start digging or escalate. What tools, if any, would you recommend? I have been running individual commands like last, utmpdump, scrubbing logs manually but I figured there has to be a tool to make this easy. submitted by /u/sidgup [link] [comments]  ( 2 min )

Octopus Network is a brand new multichain network born to serve application-specific blockchains, aka appchains. Octopus Network provides… Continue reading on Octopus Network »  ( 2 min )

Or how to collect million of bugbounty subdomains in order to make a few wordlists. Continue reading on Medium »  ( 1 min )

Cyber Security - Learn hack Secure. Continue reading on Medium »  ( 3 min )

What’s up guys it’s the 10th day of #100DaysofHacking. 10% of the goal is achieved let’s go through today’s objectives and report Continue reading on Medium »  ( 2 min )

Don’t stress yourself too much! Continue reading on Medium »  ( 3 min )

Remote code execution (RCE) is a class of software security flaws/vulnerabilities. RCE vulnerabilities will allow a malicious actor to… Continue reading on Medium »  ( 1 min )

File Upload (Dosya Yükleme), kullanıcının bir web sunucusuna dosya yüklemesine denir. Web sayfaları kullanıcıdan dosya yüklemesi için… Continue reading on Medium »  ( 10 min )

by Ramyata Rao, Digital Marketing Manager at Jax.Network Continue reading on Jax.Network Blog »  ( 4 min )

Since school, I have been reading Hacker (the Russian offensive security magazine) when I had the opportunity to buy it (then it was still… Continue reading on Medium »  ( 2 min )

Low-hanging fruit are bugs that are very easy to find. I would divide them into 2 more types. Continue reading on Medium »  ( 1 min )

submitted by /u/kazetkazet [link] [comments]

submitted by /u/ValtteriLe [link] [comments]

submitted by /u/mthbernardes [link] [comments]

submitted by /u/SRMish3 [link] [comments]

submitted by /u/mthbernardes [link] [comments]  ( 1 min )

submitted by /u/AranAilbhe [link] [comments]  ( 2 min )

submitted by /u/g_e_r_h_a_r_d [link] [comments]  ( 1 min )

Introduction Horizontall is an “easy” rated CTF Linux box on Hack The Box platform. The box covers initial compromise by exploiting Strapi RCE vulnerability and The post Horizontall HackTheBox Walkthrough appeared first on Hacking Articles.  ( 6 min )

Article URL: https://www.indiatimes.com/technology/news/google-thanks-indian-researcher-android-chrome-bug-561975.html Comments URL: https://news.ycombinator.com/item?id=30349459 Points: 9 # Comments: 1  ( 2 min )

Hello Friends, Continue reading on Medium »  ( 1 min )

안녕하세요! Continue reading on Medium »  ( 5 min )

My wired, unexplainable urge to get OSINT Dojo's Student Rank Badge has led me to this CTF, and now that I'm here, I realize that I can… Continue reading on Medium »  ( 4 min )

Hacktoria: Geolocation 13 (Walkthrough) Continue reading on Medium »  ( 1 min )

终极Java反序列化Payload缩小技术 by ourren 求解网络安全问题的可解释机器学习 by ourren 从一例 Pegasus 误报说开去 by Avenger 绕过污点分析的一些思考 by ourren 2021网络金融黑产研究报告 by ourren 更多最新文章，请访问SecWiki  ( 2 min )

I'm very new to computer forensics. Right now I'm exploring different data acquisition tools. I tried to image a usb device using FTK Imager (on a Windows system) and dd from the SIFT workstation (linux). I noticed that: 1. These two imaging tools provide image data of different sizes. 2. FTK automatically verifies the hash of the device and the image - both hashes were the same. 3. For the dd image, I verified it by myself and they were the same. I have few questions: 1. Why is the hash of the same device different on FTK (running on windows) and when checking on the SIFT Workstation (linux) ? 2. If different tools provide different images, do analysts use a combination of multiple tools? 3. I read about write blockers, I did not use one while imaging, could the difference be because of this? I'd be grateful if you could help me understand more about this process by answering my questions or sharing more resources that I could use. Thanks! submitted by /u/nybble04 [link] [comments]  ( 4 min )

submitted by /u/DFIRScience [link] [comments]  ( 1 min )

Anyone has any experience recovering permanently deleted iCloud data using Cellebrite? Or any other forensic tools ? submitted by /u/Techn0prince [link] [comments]  ( 2 min )

Hi all, My Ence cert is up in April 22 and I would like to maintain accreditation. Unfortunately my role has a focus towards E-Discovery and not so much digital forensics so I may struggle to get aid from my employer re training and financing. Anyone have experience renewing? Are there any requirements for renewal? As I am likely having to purchase the training myself I don't want the training to be too expensive (particularly as it's not a skill I use day to day). I would likely benefit the most from Cellebrite or AXIOM training. TIA submitted by /u/Genzlol [link] [comments]  ( 1 min )

XDR安全技术的魅力究竟在哪里，被众人寄予厚望的XDR技术能否解决哪些难题？  ( 1 min )

在乌克兰危机加剧之际，欧洲央行警告各银行可能受到与俄罗斯有关的网络攻击，要求各银行加强网络防御。  ( 1 min )

随着新一轮金融科技的发展与产业的变革，金融行业加快了数字化转型的步伐，灵活与便捷的金融业务模式在为用户提供更加优质的金融服务的同时，也面临着来自黑产不断演变迭代的各类新型攻击威胁。  ( 1 min )

一个存在安全风险的Amazon S3存储桶中，包含约700万人的个人数据信息。  ( 1 min )

运动设备与服装品牌美津浓(Mizuno)在2月4日遭受了一次勒索软件攻击。这次攻击严重地导致公司业务中断。

欧洲最大的汽车经销商之一埃米尔·弗雷(Emil Frey)上个月遭到勒索软件攻击，这家瑞士公司于2月1日出现在Hive勒索软件的受害者名单上。  ( 1 min )

结合线下与线上新玩法，CIS 2021春日版与您不见不散。  ( 1 min )

新修订的《网络安全审查办法》以关键信息基础设施的供应链安全为核心，重点加强对数据安全的关注和规范。

Google发布了适用于Windows、Mac和Linux的Chrome，以修复威胁参与者在攻击中使用的高严重性零日漏洞。

美国网络安全与基础设施安全局(CISA)在“已知被利用漏洞目录”中又增加了15个漏洞。  ( 1 min )

美国联邦调查局与美国特勤局发布联合网络安全咨询公告，显示BlackByte 勒索软件组织在过去3个月中入侵了至少3 个美国关键基础设施。  ( 1 min )

Showmax disclosed a bug submitted by qualin: https://hackerone.com/reports/1478449 - Bounty: $50

Nextcloud disclosed a bug submitted by ctulhu: https://hackerone.com/reports/1358977 - Bounty: $100

Shopify disclosed a bug submitted by saurabhsankhwar3: https://hackerone.com/reports/1406495 - Bounty: $900

​ http://162.12.215.254/Data/ I was looking for the movies and the English ones are mostly good quality, and without any burned in subs or forced dual languages. ​ Sorry if repost. Found searching, "English" in search box with "video" in ['filegroup or ext'] box on eyedex.org submitted by /u/Rest-in-Peep [link] [comments]  ( 1 min )

https://who.4386.ltd/Doctor/ I think all marvel files are in 4K. there are more movies in the "movies for" tab. https://who.4386.ltd/Heng/ P.S. the site is in chinese so let chrome translate the page first. submitted by /u/CompetitiveMango12 [link] [comments]  ( 1 min )

Hello, Amazing hackers in this blog you are gonna see about principles of security.  ( 3 min )

Hi, Amazing Hackers today I come up with another interesting topic on Tryhackme which is Pentesting Fundamental.  ( 3 min )

Cómo adivinar la palabra del día a través de ingeniería inversa Continue reading on InfoSec Write-ups »  ( 4 min )

Hey, it’s been a long time since I published a bug bounty write-up. I was in an internship period. So, I had a lot of free time. Anyways…  ( 4 min )

Hey, This is my first writeup and I will talk about an account takeover that I found in May on a vulnerability disclosure program. Let’s…  ( 4 min )

Hello, Amazing hackers in this blog you are gonna see about principles of security.  ( 3 min )

Hi, Amazing Hackers today I come up with another interesting topic on Tryhackme which is Pentesting Fundamental.  ( 3 min )

Cómo adivinar la palabra del día a través de ingeniería inversa Continue reading on InfoSec Write-ups »  ( 4 min )

Hey, it’s been a long time since I published a bug bounty write-up. I was in an internship period. So, I had a lot of free time. Anyways…  ( 4 min )

Hey, This is my first writeup and I will talk about an account takeover that I found in May on a vulnerability disclosure program. Let’s…  ( 4 min )

Part 1 Continue reading on Medium »  ( 3 min )

Once again I am back with a walkthrough to a GEOINT challenge. I will be explaining how to solve Geolocation 11 practice test on… Continue reading on InfoSec Write-ups »  ( 5 min )

Once again I am back with a walkthrough to a GEOINT challenge. I will be explaining how to solve Geolocation 11 practice test on… Continue reading on Medium »  ( 5 min )

On Jan 20, 2022, Quiztime (contributor @twone2) shared a new OSINT quiz with us. The objective was simple. We had to figure out when the… Continue reading on Medium »  ( 2 min )

Reverse Image Search is a web-based tool for finding identical and similar images related to the image you are looking for. Marketers can… Continue reading on Medium »  ( 2 min )

Many people know that before getting the value of a tag attribute, the browser decodes the HTML entities inside. Let’s say if you try to… Continue reading on Medium »  ( 2 min )

Hello friends, I’ve seen this question come by often so I’ve decided to try and group all the resources of myself that I have about… Continue reading on Medium »

Often translated into French as “prime au bogue” or “bounty for the detected flaw”, the bug bounty appeared in the 90s within Netscape… Continue reading on CyberSecurity and GDPR compliance »  ( 3 min )

Hello guys👋👋 ,Prajit here from the BUG XS Team and Cyber Sapiens United LLP Cybersecurity and Red Team Intern, in this I am regularly… Continue reading on Medium »  ( 4 min )

How I was able to takeover admin account by exploiting forgot password functionality. Continue reading on Medium »  ( 2 min )

As I was going through web application vulnerabilities during my 100 days of hacking, I came across this interesting topic Broken Access… Continue reading on Medium »  ( 1 min )

Last year, we (My researcher partner on this topic, Anil and me) and found a SQL injection vulnerability on a target at Synack which was… Continue reading on Medium »  ( 5 min )

Hello there, let’s discuss on how to bypass endpoints. Before moving further, let’s take a quick glance about endpoints. Continue reading on Medium »  ( 2 min )

Hello!! This is my first article, and I really hope you enjoy it! From June 2021, I began looking for issues on the websites. Continue reading on Medium »  ( 1 min )

As you may know, Javascript is a weakly typed language. This features of the language can be used by hackers to bypass some checks within… Continue reading on Medium »  ( 1 min )

submitted by /u/sysopfb [link] [comments]

submitted by /u/Mempodipper [link] [comments]

submitted by /u/netbiosX [link] [comments]  ( 1 min )

submitted by /u/adrian_rt [link] [comments]

submitted by /u/chicksdigthelongrun [link] [comments]

submitted by /u/woja111 [link] [comments]  ( 1 min )

U.S. Dept Of Defense disclosed a bug submitted by shiar: https://hackerone.com/reports/1436223

U.S. Dept Of Defense disclosed a bug submitted by websecnl: https://hackerone.com/reports/409237

U.S. Dept Of Defense disclosed a bug submitted by websecnl: https://hackerone.com/reports/389250

U.S. Dept Of Defense disclosed a bug submitted by pll25: https://hackerone.com/reports/1436460

U.S. Dept Of Defense disclosed a bug submitted by dreyand72: https://hackerone.com/reports/1296366

U.S. Dept Of Defense disclosed a bug submitted by rozerx00: https://hackerone.com/reports/1200770

U.S. Dept Of Defense disclosed a bug submitted by pelegn: https://hackerone.com/reports/1457277

U.S. Dept Of Defense disclosed a bug submitted by pelegn: https://hackerone.com/reports/1457546

U.S. Dept Of Defense disclosed a bug submitted by pelegn: https://hackerone.com/reports/1457493

U.S. Dept Of Defense disclosed a bug submitted by pelegn: https://hackerone.com/reports/1457444

U.S. Dept Of Defense disclosed a bug submitted by pelegn: https://hackerone.com/reports/1457413

U.S. Dept Of Defense disclosed a bug submitted by fiveguyslover: https://hackerone.com/reports/995144

U.S. Dept Of Defense disclosed a bug submitted by pirateducky: https://hackerone.com/reports/711662

U.S. Dept Of Defense disclosed a bug submitted by takester: https://hackerone.com/reports/1061736

U.S. Dept Of Defense disclosed a bug submitted by iam_a_jinchuriki: https://hackerone.com/reports/1244145

U.S. Dept Of Defense disclosed a bug submitted by ghostxsec: https://hackerone.com/reports/1415825

Hey all, I'm going to be participating in an Attack/Defend CTF, and apparently one of the biggest vulnerabilities from previous competitions was replay attacks. Some more details: The server that is traditionally vulnerable to replay attacks is a headless Arch Linux box with limited disk space and no access to the Internet. I have superuser access this box via SSH; This server exists outside of our defensive LAN. Its sole responsibility is relaying commands to/from external entities. Think like a self-driving Tesla car being told what to do: "Turn left, turn left, turn left...". I should underscore that if an attacker replayed these commands, the car would inevitably crash. I've configured the IPtables on the box to: Drop invalid traffic; Accept existing traffic; Accept SSH from our administrative workstation; Accept commands from our client workstation; Forward traffic to the external entities; and Drop everything else. I want to inquire about any lightweight transport layer security options that I could implement to secure the bidirectional communication. I'm exploring IPsec/VPNs but I haven't found success. I just wanted to ask if I was missing anything simple here. Thank you for your time. submitted by /u/InfamousClyde [link] [comments]  ( 1 min )

So I just set up a new OSSIM instance from scratch. I've added my API key (and have subsequently regenerated new ones for troubleshooting). I'm not sure how long I have to wait for the OTX subscriptions to sync and download to the OSSIM client, but when I click the dropdown on the OTX page in OSSIM, and click on View Account Details, it takes me to the otx.alienvault.com webpage, and shows that I'm not following or subscribed to any pulses.. However, if I log into OTX with the same account, it shows that I am subscribed to several. I've ran the 'curl' command to test the OTX-API key and it worked without error. I've also noticed that another alarm I am receiving is "no information available. you are no longer subscribed to this pulse" but there is no information as to what pulse they're referring to. And googling it found an Alienvault KB that said it was fixed in 5.4. I'm on 5.8 (the latest version, up to date as well). ​ Anyone else having this issue with Alienvault OSSIM and OTX not syncing? If there's a command to force sync (I've done the option in the console for updating the threat feeds), that would be appreciated. submitted by /u/Phyxiis [link] [comments]  ( 1 min )

We have some spare resources and we're looking to build a dedicated forensics, analysis lab. We have a couple poweredges we can use. The current plan is a segregated environment to clone suspect machines and see how they interact and do whatever analysis is required. I don't really know where to start expect segregating it or having a faux network connection. It seems a lot of people just run labs locally, however we're required to essentially have thin clients. What have your team built for this? Any must have tools? submitted by /u/idnUygelps [link] [comments]  ( 3 min )

We are a medium size healthcare medical center, maybe 300 nodes. What are the available open source /free tools I can use to achieve this use case ? Scanner that will say “2 new systems in this". Results should give me the OS version and check if antivirus is installed. submitted by /u/techno_it [link] [comments]  ( 1 min )

I found access to Tomcat Virtual Host Manager on Tomcat 9 (not the one that deploys WAR files) which according to docs means the account has the role "admin-gui". I've been asked if I can pivot further using this but I'm completely stuck because I've never used it. All I can use is a form which can "Add Virtual Host" but from my testing (and limited experience with Tomcat) I've run into a halt. Anyone know if this can be used to privesc? submitted by /u/plutofoxtrot [link] [comments]  ( 1 min )

Lastpass free account by default doesn't support Yubikey. But lastpass support Google auth. In theory, they are all compatible because of the same protocol. Can I just set select "Google Auth." then go ahead and use my Yubico auth. app? Thanks. Anyone has experience? submitted by /u/mk_life [link] [comments]  ( 1 min )

Book your seats for the coolest, most value-packed cybersecurity event of 2022!  ( 2 min )

Today, I will be sharing about my solution on Intigriti’s February XSS Challenge 0222  ( 4 min )

Walkthrough  ( 3 min )

In this article, I use NetworkMiner, Wireshark and Hybrid-Analysis to analyze several malicious emails and a PCAP file that captured…  ( 11 min )

You will understand what is security awareness and the importance of it  ( 2 min )

Get all the writeups from Day 1 to 21, Click Here Or Click Here.  ( 2 min )

Hi all, hope you are keeping well and staying safe. This blog is about my recent Account Takeover finding. Continue reading on InfoSec Write-ups »  ( 4 min )

Hack the backup file  ( 3 min )

We will be learn about a little bit of Forensics Analysis in Windows.  ( 5 min )

Use Flickr app to install malicious apps remotely acting as updates. Continue reading on InfoSec Write-ups »  ( 3 min )

Book your seats for the coolest, most value-packed cybersecurity event of 2022!  ( 3 min )

Today, I will be sharing about my solution on Intigriti’s February XSS Challenge 0222  ( 4 min )

Walkthrough  ( 3 min )

In this article, I use NetworkMiner, Wireshark and Hybrid-Analysis to analyze several malicious emails and a PCAP file that captured…  ( 11 min )

You will understand what is security awareness and the importance of it  ( 2 min )

Get all the writeups from Day 1 to 21, Click Here Or Click Here.  ( 2 min )

Hi all, hope you are keeping well and staying safe. This blog is about my recent Account Takeover finding. Continue reading on InfoSec Write-ups »  ( 4 min )

Hack the backup file  ( 3 min )

We will be learn about a little bit of Forensics Analysis in Windows.  ( 5 min )

Use Flickr app to install malicious apps remotely acting as updates. Continue reading on InfoSec Write-ups »  ( 3 min )

submitted by /u/dmchell [link] [comments]

submitted by /u/dmchell [link] [comments]

submitted by /u/netbiosX [link] [comments]

submitted by /u/banginpadr [link] [comments]

submitted by /u/banginpadr [link] [comments]

Article URL: https://www.microsoft.com/security/blog/2021/12/11/guidance-for-preventing-detecting-and-hunting-for-cve-2021-44228-log4j-2-exploitation/ Comments URL: https://news.ycombinator.com/item?id=30335183 Points: 2 # Comments: 0  ( 28 min )

I was thinking that what if there was a type of screen reader or something like that that detected enemy characters in a video game and locked your mouse to it? is that even possible? just an idea I don't know the technicalities submitted by /u/mr_killlerrrrr [link] [comments]  ( 1 min )

Invicti is proud to break down barriers of access in software. Learn more about how we’ve achieved WCAG 2.1 AA compliance for accessibility standards. READ MORE  ( 3 min )

Article URL: https://www.rapid7.com/blog/post/2022/02/14/dropping-files-on-a-domain-controller-using-cve-2021-43893/ Comments URL: https://news.ycombinator.com/item?id=30333641 Points: 2 # Comments: 0  ( 14 min )

Article URL: https://nvd.nist.gov/vuln/detail/CVE-2021-23567 Comments URL: https://news.ycombinator.com/item?id=30328625 Points: 4 # Comments: 4  ( 4 min )

SecWiki周刊（第415期) by ourren Java安全研究与安全开发面试题总结 by ourren 记一次挖矿病毒的应急响应 by ourren 更多最新文章，请访问SecWiki  ( 2 min )

The red team comprises offensive security experts that attempt to attack the cybersecurity defenses of an organization. On the other hand… Continue reading on Medium »  ( 1 min )

Hey all, I wanted to discuss something with this community. Recently I got an ask to recommendation DFIR services for a small business (<50 employees) after they were hacked. I started thinking and realized their was not any business I knew of to help small businesses. ​ First, if anyone knows of a US-based company for DFIR services I would appreciate a suggestion. ​ Second, I do not believe there is any low-cost DFIR company that is meant for small (or medium-sized) business. So, what do you think it would take for these large consulting firms- or even a government service to provide accessible services to any small business that doesn't have the capital to hire the larger cybersecurity or consulting firms? I.e. Create a special LICENSE on open source projects, organize a non for-profit with rotating analysts, pro-bono cyber, etc. submitted by /u/Jklm264 [link] [comments]  ( 7 min )

It is not uncommon a windows environment especially dedicated servers which are managed by developers or IT staff to have installed the Notepad++ text editor.… Continue reading → Persistence – Notepad++ Plugins  ( 5 min )

It is not uncommon a windows environment especially dedicated servers which are managed by developers or IT staff to have installed the Notepad++ text editor.… Continue reading → Persistence – Notepad++ Plugins  ( 5 min )

2021 年 11 月，AT&T Alien Labs 首次披露 Golang 编写的恶意软件 BotenaGo。最近，该恶意软件的源代码被上传到 GitHub 上，这可能会催生更多的恶意软件变种。  ( 1 min )

FritzFrog 主要通过 SSH 爆破进行传播，爆破成功后部署恶意软件。研究人员发现，FritzFrog 大约 37% 的失陷主机位于中国。  ( 1 min )

知乎表示，对于违规收集个人信息安全的行为，本身严重背离知乎价值观，对这类系统我们一向持坚决反对态度。  ( 1 min )

调查显示，2021年全球范围内勒索软件威胁正持续增加。全球的组织、机构在过去一年共支付了超6亿美元的加密货币。

根据2月10日解密的一份文件，美国中央情报局在未经国会允许的情况下，一直秘密地搜集美国本土公民数据。  ( 1 min )

苹果公司已经成功修复一个新的WebKit零日漏洞。  ( 1 min )

根据卡巴斯基的最新报告，去年超过一半的邮件是垃圾邮件  ( 1 min )

安全部门是如此不受重视，当企业经营出现问题时，几乎是第一个被裁掉，以此降低企业经营成本。  ( 1 min )

网络安全科技企业，最宝贵的就是人才。一般来说，企业70%左右的成本都是人力成本，没有合适的人，一切远大的科技理想都是镜中花  ( 1 min )

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]

http://27.156.152.250:8889/ If you're lucky you'll see the grumpy old farmer. Warning, possibly some dead animals and cruelty. -edit submitted by /u/inoculatemedia [link] [comments]

XSS challenge by intigriti Solved by Th3Mind Continue reading on Medium »  ( 3 min )

Today, I will be sharing about my solution on Intigriti’s February XSS Challenge 0222 Continue reading on InfoSec Write-ups »

Price Manipulation Continue reading on Medium »  ( 1 min )

Objectives of day 9 : Continue reading on Medium »  ( 1 min )

LinkFinder : a tool written in python that finds the endpoints from/in JavaScript files. Continue reading on Medium »  ( 1 min )

Hello all i am back with another blog on bug bounty we will see how we can setup/configure burpsuite with firefox to intercept all… Continue reading on Medium »  ( 1 min )

In Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1, and v3, a File Content Disclosure vulnerability exists where properly designed… Continue reading on Medium »  ( 1 min )

Summary : Continue reading on Medium »  ( 3 min )

Don’t stress yourself too much Continue reading on Medium »  ( 3 min )

Nearly everyone seems to say that the best way to store secrets in a cloud environment is to put them in a secrets manager and only fetch them when needed. This has the advantage of allowing seamless key rotation, adding IAM policies, etc. Does this actually increase the security posture of the app though? The app still needs to authenticate with a key manager somehow - I would guess by way of an API token or similar. If the app or the box serving the app get owned, doesn't this basically compromise all the secrets in the secret manager accessible to the app? Also, assuming my previous statement is correct, there must be a "bootstrapping secret" which is injected to the app that lets it talk to the secrets manager. How does the app get access to that secret? I don't mean in a specific cloud (e.g. Azure, GCP, AWS) - just in general, how does whoever is providing the secret know to trust the app? submitted by /u/parallelocat [link] [comments]  ( 1 min )

I'm in the FOR508 class right now, playing around with around with Kape. I was able to get it to run the !SANS_Triage target and upload the results to an S3 bucket. This will be amazing for doing IR on remote computers, what an awesome tool! I'm also able to get Kape to create a memory image using the DumpIt_Memory module but so far I haven't been able to get it to send a memory image to S3. Is that possible? Here's a sample for how I got the !SANS_Triage target to send to S3: .\kape.exe --tsource C: --tdest D:\kape\acquired\SANS_Triage_%d%m --tflush --target !SANS_Triage --vss --vhdx S3_SANS_Triage_ --s3r us-east-1 --s3b bucket123 --s3k THISISMYACCESSKEYID --s3s ThIsIsMaHsUpErSeCrEtAcCeSsKey123456789+++ --s3st hQvTyXZmzJgui$c6@KB$ASiQAkRt!BTcMiB%38@XeD&agxzk9#ihiBiqaPKj%gok*iwJeAtRKgapqp8rJ!LFLCAivNmgqu*iBQHg!j&i55eByWxQnqJUcWiAF8YBhe9XhQvTyXZmzJgui$c6@KB$ASiQAkRt!BTcMiB%38@XeD&agxzk9#ihiBiqaPKj%gok*iwJeAtRKgapqp8rJ!LFLCAivNmgqu*iBQHg!j&i55eByWxQnqJUcWiAF8YBhe9XhQvTyXZmzJgui$c6@KB$ASiQAkRt!BTcMiB%38@XeD&agxzk9#ihiBiqaPKj%gok*iwJeAtRKgapqp8rJ!LFLCAivNmgqu*iBQHg!j&i55eByWxQnqJUcWiAF8YBhe9XhQvTyXZmzJgui$c6@KB$ASiQAkRt!BTcMiB%38@XeD&agxzk9#ihiBiqaPKj%gok*iwJeAtRKgapqp8rJ!LFLCAivNmgqu*iBQHg!j&i55eByWxQnqJUcWiAF8YBhe9XhQvTyXZmzJgui$c6@KB$ASiQAkRt!BTcMiB%38@XeD&agxzk9#ihiBiqaPKj%gok*iwJeAtRKgapqp8rJ!LFLCAivNmgqu*iBQHg!j&i55eByWxQnqJUcWiAF8YBhe9X Is this the way? From what I can tell the only way to generate a temporary AWS logon was using the CLI. Create a new user that only has put/write access to the S3 bucket you want to use then run: PS C:\Program Files\Amazon\AWSCLIV2> aws sts get-session-token --duration-seconds 129600 submitted by /u/mnbitcoin [link] [comments]  ( 1 min )

I was actually looking for something to use as a PWNplug, but even those stand out a bit, whereas wifi light bulbs are ... just light bulbs, with wifi, and a devkit. https://hackaday.com/2020/02/11/custom-firmware-for-cheap-smart-bulbs-is-a-cinch-to-tinker-with/ Most of them seem to be based on the same Expressif chipset https://github.com/ct-Open-Source/tuya-convert https://github.com/arendst/Tasmota This was more of a rhetorical question, but I thought it might interest some of you. submitted by /u/boli99 [link] [comments]  ( 3 min )

I read an article about a pen tester making 300k off a bug bounty. My question is can someone live off this? Can anyone do this with the right knowledge and training? Do you have to be some sort of genius? submitted by /u/Bugskee [link] [comments]  ( 3 min )

Looking for a good resource (web page, poster, graphic etc.) for locating artifacts that indicate the use of a crypto miner on a computer. Does anyone know of anything? submitted by /u/admincee [link] [comments]  ( 1 min )

Has anyone here had working experience with the free tool Web Page Saver? I am looking into using it at my lab and have some serious questions about how it work and when/what cases it should be used with. Any guidance is appreciated submitted by /u/trex4n6 [link] [comments]  ( 1 min )

Howdy all! Newbie alert! So I currently started using Bulk_Extractor with Volatility tor Memory Forensics! My real question is how reliable are the results obtained from Bulk Extractor? I see a lot of explicit websites in my Bulk Extractor Domain Histogram results! But can’t be able to find them in Volatility! Any idea of how this works? submitted by /u/GloryHunter9 [link] [comments]  ( 1 min )

I'm in the FOR508 class right now, playing around with around with Kape. I was able to get it to run the !SANS_Triage target and upload the results to an S3 bucket. This will be amazing for doing IR on remote computers, what an awesome tool! I'm also able to get Kape to create a memory image using the DumpIt_Memory module but so far I haven't been able to get it to send a memory image to S3. Is that possible? Here's a sample for how I got the !SANS_Triage target .\kape.exe --tsource C: --tdest D:\kape\acquired\SANS_Triage_%d%m --tflush --target !SANS_Triage --vss --vhdx S3_SANS_Triage_ --s3r us-east-1 --s3b bucket123 --s3k THISISMYACCESSKEYID --s3s ThIsIsMaHsUpErSeCrEtAcCeSsKey123456789+++ --s3st hQvTyXZmzJgui$c6@KB$ASiQAkRt!BTcMiB%38@XeD&agxzk9#ihiBiqaPKj%gok*iwJeAtRKgapqp8rJ!LFLCAivNmgqu*iBQHg!j&i55eByWxQnqJUcWiAF8YBhe9XhQvTyXZmzJgui$c6@KB$ASiQAkRt!BTcMiB%38@XeD&agxzk9#ihiBiqaPKj%gok*iwJeAtRKgapqp8rJ!LFLCAivNmgqu*iBQHg!j&i55eByWxQnqJUcWiAF8YBhe9XhQvTyXZmzJgui$c6@KB$ASiQAkRt!BTcMiB%38@XeD&agxzk9#ihiBiqaPKj%gok*iwJeAtRKgapqp8rJ!LFLCAivNmgqu*iBQHg!j&i55eByWxQnqJUcWiAF8YBhe9XhQvTyXZmzJgui$c6@KB$ASiQAkRt!BTcMiB%38@XeD&agxzk9#ihiBiqaPKj%gok*iwJeAtRKgapqp8rJ!LFLCAivNmgqu*iBQHg!j&i55eByWxQnqJUcWiAF8YBhe9XhQvTyXZmzJgui$c6@KB$ASiQAkRt!BTcMiB%38@XeD&agxzk9#ihiBiqaPKj%gok*iwJeAtRKgapqp8rJ!LFLCAivNmgqu*iBQHg!j&i55eByWxQnqJUcWiAF8YBhe9X ​ From what I can tell the only way to generate a temporary AWS logon was using the CLI. Create a new user that only has put/write access to the S3 bucket you want to use then run: PS C:\Program Files\Amazon\AWSCLIV2> aws sts get-session-token --duration-seconds 129600 submitted by /u/mnbitcoin [link] [comments]  ( 1 min )

Hi HN, I've always been curious about bug hunting. Finding vulns. I have some foundational knowledge like fuzzing, basic web security and reading assembly, but I am also aware of all the improvements in software and web security and there are so many new tech stacks, languages and platforms these days. Where does one begin? Is it worth learning how to find memory safety vulns given how C and friends are dying (and when they are alive things like CFG and appguard make it impossible to exploit them)? Are there any modern books or sites you recommend? Should I be leaning some language (rust/go?) or stack (k8s?) as a prerequisite? Comments URL: https://news.ycombinator.com/item?id=30324988 Points: 1 # Comments: 0  ( 1 min )

Article URL: https://www.theregister.com/2022/02/11/apple_emergency_webkit/ Comments URL: https://news.ycombinator.com/item?id=30324643 Points: 4 # Comments: 3  ( 9 min )

submitted by /u/ChadMotivation [link] [comments]

Skip tracing is the process of tracking down people who are particularly hard to find, whether they’re persons-of-interest, fact witnesses… Continue reading on Medium »

First it’s important to describe what a honeypot is and why it’s a good idea to create on. In the cyber security field a honeypot is… Continue reading on Medium »  ( 9 min )

今日暂未更新资讯~ 更多最新文章，请访问SecWiki  ( 2 min )

submitted by /u/Boobalizer [link] [comments]

本文主要总结了我在写ctfshow题目中遇到的关于PHP的考点。因为只总结知识点和考点会比较空洞，也不容易理解，所以我都是通过题目来总结考点，这样的话比较容易理解。  ( 2 min )

本文总结了ctfshow题目中遇到的关于PHP的考点。  ( 2 min )

UPchieve disclosed a bug submitted by zeyu2001: https://hackerone.com/reports/1309435

Article URL: https://www.kalmarunionen.dk/writeups/2021/hxp-2021/lkvm/ Comments URL: https://news.ycombinator.com/item?id=30320463 Points: 4 # Comments: 0  ( 11 min )

Article URL: https://lwn.net/SubscriberLink/884052/c946bb7f8d39c54e/ Comments URL: https://news.ycombinator.com/item?id=30319122 Points: 8 # Comments: 0  ( 16 min )

This is a write-up about the Biohazard CTF room from Tryhackme (a free cybersecurity training site that provides machines for you to… Continue reading on Medium »  ( 8 min )

In this article, I am going to explain what are SUID binaries how to exploit them for getting root shell i.e privilege escalation on the… Continue reading on Medium »  ( 2 min )

Shopify disclosed a bug submitted by hogarth45: https://hackerone.com/reports/1088159 - Bounty: $500

Twitter disclosed a bug submitted by iambouali: https://hackerone.com/reports/1369674 - Bounty: $5040

Greetings Everyone from Hippodrome (Constantinople), Continue reading on Medium »  ( 2 min )

Objectives of day 7 : Continue reading on Medium »  ( 1 min )

Hello Hackers hope so You are doing well. I myself Manan Aggarwal a Btech Student is Here to Present you the blog in the continuation of… Continue reading on Medium »  ( 6 min )

Hey, it’s been a long time since I published a bug bounty write-up. I was in an internship period. So, I had a lot of free time. Anyways… Continue reading on Medium »  ( 2 min )

Note: This article is only for educational purpose. Continue reading on Medium »  ( 2 min )

Access Control (Erişim Kontrolü) veya Authorization (Yetkilendirme), talep edilen eylemlere veya erişim kaynaklarına, kimin veya neyin… Continue reading on Medium »  ( 10 min )

Hey folks, Continue reading on Medium »  ( 2 min )

I will write more about how I make PoCs in the future. But with special care, I work out scenarios for vulnerabilities that need user… Continue reading on Medium »  ( 2 min )

The paper introduces the case study for attack surface analysis and monitoring with practical application of open-source intelligence… Continue reading on Medium »  ( 7 min )

This is the post from my Telegram channel about Bug Bounty, where I share my experience and knowledge as well as just write about being… Continue reading on Medium »  ( 2 min )

开源软件包与软件供应链安全漏洞修复分析研究 by ourren 攻防对抗的十八层地狱 by ourren 更多最新文章，请访问SecWiki  ( 2 min )

Spiderfoot Continue reading on Medium »  ( 1 min )

Yes, this is really happening.  No, I’m not running to cause ballot confusion. Continue reading on Medium »  ( 1 min )

Finding exact timestamps in web material is a must-have ability for OSINT and verification researchers, but where do you look? Continue reading on Medium »

The paper introduces the case study for attack surface analysis and monitoring with practical application of open-source intelligence… Continue reading on Medium »  ( 7 min )

submitted by /u/Jan_Prince [link] [comments]

A little over my head but if any climate geeks want to access raw data, here's the tools. Main index directory: https://www.jpss.noaa.gov/assets/ Community Satellite Processing Package (open source direct broadcast): http://cimss.ssec.wisc.edu/cspp/ Example: https://www.jpss.noaa.gov/assets/pdfs/technical_documents/472-00340_J2_HRD_to_DBS_RF_ICD_Rev_C.pdf API references: https://www.jpss.noaa.gov/sciencedocuments/sciencedocs/2015-06/474-00019-01_JPSS-API-Users-Guide-Vol-I_0123A.pdf https://www.jpss.noaa.gov/sciencedocuments/sciencedocs/2015-06/474-00019-02_JPSS-API-Users-Guide-Vol-II_0124-.pdf submitted by /u/inoculatemedia [link] [comments]

http://www.qotile.net/files/ submitted by /u/inoculatemedia [link] [comments]

越来越多的国内互联网企业为了提高开发测试迭代速度以及前端统一的需求，搭上了前后端分离的快车。基于新的前端框架，如何更高效的进行API测试就变得越加重要。  ( 1 min )

使用NodeJS开发的应用，如果需要处理大量数据，可能导致堆溢出。错误提示中，会有“JavaScript heap out of memory”。

submitted by /u/Tradition_Wonderful [link] [comments]  ( 1 min )

I have my masters in digital forensics but like a fool I never did anything with it. I’m a quick study and will only take me about a week or two to relearn everything. I have a security clearance and currently with in government contracting as a project manager but no company is biting. I want to finally make the switch but it’s hard when you don’t have in lab experience or the certs. Any advice on how to get restarted in this field? TIA! submitted by /u/kindreddino [link] [comments]  ( 6 min )

Hello, can anyone teach me how to image these devices. Or if you can point me to some tutorials. I have been trying to learn but I keep failing. Thanks in advance. submitted by /u/Sudden_Ad9859 [link] [comments]  ( 1 min )

Article URL: https://arstechnica.com/gadgets/2022/02/apple-patches-security-holes-and-bugs-with-ios-15-3-1-and-macos-12-2-1/ Comments URL: https://news.ycombinator.com/item?id=30308727 Points: 2 # Comments: 0  ( 3 min )

submitted by /u/boch33n [link] [comments]

submitted by /u/ChoiceGrapefruit0 [link] [comments]

submitted by /u/chicksdigthelongrun [link] [comments]

submitted by /u/monoimpact [link] [comments]  ( 1 min )

submitted by /u/CoolerVoid [link] [comments]  ( 1 min )

submitted by /u/Margaruga [link] [comments]

submitted by /u/redhuntlabs [link] [comments]  ( 1 min )

Article URL: https://mellium.im/cve/cve-2022-24968/ Comments URL: https://news.ycombinator.com/item?id=30308038 Points: 1 # Comments: 0  ( 1 min )

Article URL: https://blog.malwarebytes.com/exploits-and-vulnerabilities/2022/02/update-now-apple-fixes-actively-exploited-zero-day/ Comments URL: https://news.ycombinator.com/item?id=30304109 Points: 1 # Comments: 0  ( 3 min )

My friend is having technical difficulties with his iPad (he reset it and you can’t get through the welcome/setup without allowing remote access management to a certain company, which he doesn’t want to do) and he bought some software on eBay that promises to help bypass that error. His computer is old and won’t run the software when he tries to. My MacBook is brand new and so he asked me if I could download the eBay software onto my computer to try to fix the iPad. To me that doesn’t seem like something I want to download onto my new laptop. Maybe I shouldn’t have binged all of the darknet diaries podcast but idk doesn’t feel safe. Here’s what it looks like. Any thoughts? submitted by /u/aimhighswinglow [link] [comments]  ( 4 min )

I had this idea on how to generate supposedly safe passwords for different websites/accounts that wouldn't require passwords to be memorized or stored. The idea is to 1 - Come up with a short default string that would never change (say, "bubly42") 2 - Append the name of the website to that string for each website you make an account. For example, when creating an account for airbnb it'd produce the string "bubly42airbnb" 3 - Run that string (bubly42airbnb) through a hash function 4 - Use the output of the hash function as the password for the website This would have the upside of not requiring memorization or storage of passwords, while still generating a unique password for each site. I can just generate the password on the fly. Obvious downside is that if someone figures your pattern out, they pretty much can figure out all of your passwords. Is there anything else that I'm missing? Is this considered safe? (Btw, sorry if I'm posting on the wrong place. If that's the case, can someone direct me to a good subreddit to post this in?) submitted by /u/djoncho [link] [comments]  ( 4 min )

Torguard's VPN client intermittently consumes 50% cpu, for long periods, unrelated to any network activity, which I find suspicious. Details below. I've raised this with TG's tech support who have repeatedly denied that any such behavior exists. I'm seeing this consistently on 4 windows machines (including one VM) where I have TG running. I'm not sure where to report this as there is no TG subreddit and the VPN subreddit doesn't allow mentioning specific services. Hopefully you folks can point me in the right direction or give advice. So, if the app is running and the VPN is connected, even if there are no other apps open, TG client will randomly begin consuming a constant 50% CPU. I can't correlate this with any other condition like network traffic or other app activity or any obvious thing TG is doing. If I minimize the TG client window, it stops. And then it starts again in a few minutes, and so I repeat this remedy, and it stops. If I don't do this it continues indefinitely. So, every computer this is running on experiences a significant heat/wattage increase and CPU performance degradation due to TG. I took screenshots of this behavior using task manager. I also watched it using winternals' process monitor, which gave much more detailed info than this. ---- But this forum doesn't allow pictures. submitted by /u/Dougolicious [link] [comments]  ( 2 min )

All, I am writing an executable to put on a website for download. Every time I go to download it, I get an "unrecognized app, unknown publisher warning". It's not tagged as malicious, but it's tagged as "unknown publisher" which makes it appear that way. Does anyone know how to add a publisher? Is that something a non-corporation can do? Or could I at least add a certificate or something to make Windows calm down? submitted by /u/iExtrapolate314 [link] [comments]  ( 1 min )

Correct me if I am on the wrong subreddit, I have seen some people talk about this site in here, but how do you get access on clean-mx? I tried creating an account in there(registration form), but I haven't got a response back, unless I am being impatient. I also tried contacting the email, but it is dead as stated in the site. There is multiple sites to register accounts, xlogin.php, xregister.php, etc etc. I can see it's alive because when I search the site up, I see the dates from right now. ​ Is this site restricted to companies only or not? Can you not register anymore? ​ (couldnt post this in a other subreddit, my post kept getting removed because they thought it was a tech-support question) submitted by /u/RainbowIsRainbow [link] [comments]  ( 1 min )

Hi Folks, As the title says, what tools can help to achieve these objectives Real time scan the network to detect presence of unauthorized hardware, software, and firmware components within the network. To scan and detect in real- time the addition of devices into network and notify the security administrator via email. submitted by /u/techno_it [link] [comments]  ( 3 min )

Looking for some hardware advice for a pen test dropbox. I'd like the unit to be responsive with desktop-speed chipsets, x86/x64 based, and have an out-of-band 4G SIM callback for when client networks prevent outbound connectivity. With Windows as the primary OS, is there any way to auto connect the 4G/cellular modem with Windows, as there is with Linux (ie wvdial)? Are there any capable NUC type devices or mini PCs with inbuilt 4G capability. Want to avoid having USB modems sticking out the side, perhaps similar to rPi's cellular hat, but not rPi (or other SBCs) which would struggle with a Win with Kali VM setup. Happy to spend a bit on hardware, are there many notable boxes other than the Intel NUC, Zotac Zbox or MSI Cubi? Seen a few decent build docs that almost fit the bill, but not quite: https://infosecwriteups.com/part-2-build-the-pen-test-drop-box-69278526886a https://www.blackhillsinfosec.com/pentesting-dropbox-on-steroids/ https://www.blackhillsinfosec.com/how-to-build-your-own-penetration-testing-drop-box/ https://www.sprocketsecurity.com/blog/penetration-testing-dropbox-setup-part1 Thanks! submitted by /u/ama21n [link] [comments]  ( 1 min )

Hello. I'm graduating college soon and have an offer as a support specialist. The responsibilities are as follows: Provide 1st-tier technical support for production support issues Troubleshoot system errors by reviewing technical logs, system documentation, and application logic Monitor and triage errors generated by automated tasks in production Collaborate with Client Excellence team to ensure users’ technical support issues are resolved quickly On call rotation for urgent production issues during weekends and holidays I've been applying to IT jobs but have had little luck. Would a job like this be a good interdiction into security? Or should I look for a more traditional IT job? submitted by /u/Hellothere6667 [link] [comments]  ( 1 min )

What, again?!?! I know, right?!? Not long ago, I read this fascinating article from Joe Helle that discussed malicious uses for Windows shortcuts, or LNK files, and also discussed a Python3 scripts called "lnkbomb". As a side note, check out what Joe had to share about persistence via WSL2! As anyone who's followed me for a minute knows, I love...L   O   V   E...me some LNK files. Shortcut files are something that we see all the time, have been around for a long time (much like ADSs), but folks in the DFIR field are so focused on the "shiny hot newness", that this file type is very often overlooked and not fully exploited. The technique Joe discusses is similar to modifying the iconfilename field of a shortcut file, so that even if the "bad guy" is evicted from an infrastructure, any action that launches the LNK file results in credentials being passed via HTTP or WebDAV, where they can be collected, cracked, and then used by the threat actor. LNK files have a lot of uses, and understanding the format and structure is helpful in a lot of different ways. One example is that automatic JumpLists follow the OLE/structured storage format, and all but the DestList stream consist of LNK file formatted streams. Another example is that the building blocks of LNK files, shell items, are also the core building blocks of several Registry-based artifacts, such as shellbags. Beyond that, however, threat actors have used LNK files as lures in social engineering and phishing attacks; this means that the threat actor has built the LNK files within their own infrastructure, within their own development environment. As such, sending these files as lures is "free money" to both DFIR and CTI analysts, if they're able to leverage those files and their component metadata. So...while I know Windows 11 is out, and everyone's excited about the shiny new hotness, let's not forget that there's a lot that has worked since Windows XP (or even prior to that) and still continues to be an issue today.  ( 4 min )

In this post I will be going through the open source intelligence process I went through following an attack performed against my honeypot. Continue reading on Medium »  ( 8 min )

The Utah Valley University Cyber Security Program needed a realistic target that students could use to learn OSINT and offensive tools… Continue reading on Medium »  ( 1 min )

[Day 14] OSINT Where’s Rudolph? Continue reading on Medium »  ( 3 min )

On Dec 27, 2021, OSINT Dojo shared a OSINT quiz with us. The objective was simple. We had to figure out where the photo was taken. Please… Continue reading on Medium »  ( 1 min )

Hello! I am back with my 2nd bug bounty write up. This time I’ll be showing you how I found an Insecure Direct Object Reference bug on an… Continue reading on Medium »  ( 1 min )

QRCDR is a popular PHP — JavaScript QR-Code Generator, which is widely used for creating customized QR-Code in easy steps. also, it’s used… Continue reading on Medium »  ( 2 min )

Hi guys! I’m back with another great blog, with this blog you can learn more about SQLi and Cross Site Request Forgery (CSRF). Continue reading on Medium »  ( 2 min )

Objectives of day 7 : Continue reading on Medium »  ( 1 min )

Hello Myself Manan Aggarwal is here to present the Blog about the Basic Web technologies required for starting with the web Exploitation… Continue reading on Medium »  ( 4 min )

Spring Boot related vulnerability learning materials, collection of utilization methods and skills, black box security assessment checklist Continue reading on Medium »  ( 12 min )

Continue reading on Medium »  ( 2 min )

Assalamualaikum Wr.Wb Continue reading on Medium »  ( 6 min )

Hoping someone has seen this or has an idea what may be happening. I am performing a review and identified an installer file as an item of interest. I see the file in the host’s Amcache hive with a SHA-1 (“A”) hash. However, the recovered file has a different SHA-1 hash on disk (“B”). When running the executable on my test system and comparing it to that test machine’s Amcache, I see the same behavior. Amcache has hash “A” and the executable has hash “B.” Every other program I’ve sampled has hash matches; it seems like just this one is off. What gives? For specifics, I am using RegistryExplorer and Amcache Parser (both Zimmerman tools) for Amcache analysis. I am hashing with both X-Ways and Hasher (also Zimmerman). When reviewing Amcache Parser, I am matching the hash to the executable …  ( 3 min )

I can't afford the axiom (or whatever it is called) so can anyone provide me the link? Thank you so much! submitted by /u/Hopelessssssssss [link] [comments]  ( 1 min )

This opensource extension allows you to dump all the hashes from an image using X-Ways command-line. https://github.com/PolitoInc/X-Ways-HashExporter-Extension submitted by /u/Alarming_Arm_7724 [link] [comments]  ( 1 min )

Computer Science and Engineering with specialisation in Blockchain Technology Computer Science and Engineering with specialisation in Information Technology Computer Science and Engineering with specialisation in Data Science. Or does it not matter as long as it is Csc ? submitted by /u/nodogsareevil [link] [comments]  ( 1 min )

I am currently a digital forensic analyst of both phones and computers for law enforcement. I want to transition into a new tech role, such as infosec or another form of cyber sec but looking at the job specs for 90% of these roles I do not meet the requirements. I’m considering self funding a cert such as CISSP or Security+ as this will most likely help. What sort of jobs can my current role land me in? submitted by /u/gofigured21 [link] [comments]  ( 3 min )

Hello, Can we guess the content weightage of CHFI in the actual exam? I mean how can we know which modules will have more questions and other modules will have fewer questions in exam? I need to take the test and the book is very lengthy that can't be read as a whole so I want to get info about modules' weightage so I can learn them first (which will have more questions in the exam) and then the remaining modules (which have fewer questions). If not exactly any guess about it? submitted by /u/hardfire005 [link] [comments]  ( 1 min )

Hi everyone. I am eJPT certified and been doing tryhackme for a year now. I want to move towards blue side, especially forensics and incident response. What i wanna ask is what is best resource/website to learn dfir/soc etc Is CHFI course content good? Are elearn security forensics and incident response courses and certs valuable? Or should i stick with tryhackme (it has less content regarding blue teaming) I have also heard of securityblueteam so is the investment there invaluable? Thanks submitted by /u/Nightkinnng [link] [comments]  ( 1 min )

submitted by /u/krazybug [link] [comments]  ( 1 min )

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]  ( 1 min )

Hi guys, I hope this is the correct place to ask; I want to make a website where I can index certain posts and urls. (like a blog but easier) could you please guide me? ​ tyvm submitted by /u/zuperfly [link] [comments]  ( 1 min )

Is there a can clone/upload all the files from an OD to my shared google drive? i know about rclone but since it's not easy to use, i don't want to waste time with it if can't do the required task. + Is there a tool that can upload a shared google drive file to my shared drive? again, i know about "make a copy option" but that is not usable if the file is over the size of the free space you drive has. submitted by /u/CompetitiveMango12 [link] [comments]  ( 2 min )

Twitter disclosed a bug submitted by zhirinovskiy: https://hackerone.com/reports/1439026 - Bounty: $5040

FetLife disclosed a bug submitted by trieulieuf9: https://hackerone.com/reports/1423704 - Bounty: $100

Nextcloud disclosed a bug submitted by technorat: https://hackerone.com/reports/1476709

submitted by /u/gid0rah [link] [comments]

submitted by /u/kubiscan [link] [comments]

submitted by /u/dmchell [link] [comments]

[HTB] Love Writeup by 0x584a PendingIntent重定向：一种针对安卓系统和流行App的通用提权方法 by ourren 自动机器学习的安全风险 by ourren 解构开源IAST 打造安全灰盒利器 by ourren 更多最新文章，请访问SecWiki  ( 2 min )

一名29岁的程序员录某未经公司许可，在离职当天，私自将即将上线的京东到家平台系统代码全部删除。  ( 1 min )

dnSpy是一款流行的用于调试、修改和反编译.NET程序的工具。网络安全研究人员在分析.NET程序或恶意软件时经常使用。  ( 1 min )

2022年2月7日至2月11日共收录全球网络安全热点8项，涉及微软、Mandiant、Puma、Swissport等。  ( 1 min )

法国监管机构认为，该项服务在数据传输时没有采取足够的措施保障数据隐私权，可被美国情报机构利用。

近日，ASEC 分析人员发现 Kimsuky 组织正在使用 xRAT（基于 Quasar RAT 定制的开源 RAT）恶意软件。  ( 1 min )

Arid Viper 组织利用最初发布在土耳其国营通讯社 Anadolu 和巴勒斯坦 MAAN 发展中心的内容为诱饵，针对巴勒斯坦的机构发起攻击。  ( 1 min )

商业服务公司Morley Companies披露了一起用户数据泄露事件，大量用户数据被窃取。  ( 1 min )

上海浦东发展银行信用卡中心诚聘信息安全工程师。

《管理办法》共八章四十一条，并强调重要数据和核心数据应按照相应法律、法规在境内存储，或依法依规进行数据出境安全评估。  ( 1 min )

最近比赛出的musl题型的越来越多，不得不学习一波musl的堆利用来应对今后的比赛。  ( 1 min )

In the complex and dynamic world of application security, best practices are your best friends. This post shows how you can build an effective AppSec program based on tried and tested workflows and tools for vulnerability testing and remediation. READ MORE  ( 6 min )

submitted by /u/ScottContini [link] [comments]

submitted by /u/h4ck3dit [link] [comments]

submitted by /u/zx2c4 [link] [comments]  ( 1 min )

submitted by /u/One-World-One-Love [link] [comments]  ( 1 min )

submitted by /u/last0x00 [link] [comments]  ( 1 min )

submitted by /u/MonkeeSage [link] [comments]

Article URL: https://swarm.ptsecurity.com/fuzzing-for-xss-via-nested-parsers-condition/ Comments URL: https://news.ycombinator.com/item?id=30292426 Points: 1 # Comments: 0  ( 5 min )

Article URL: https://www.openwall.com/lists/oss-security/2022/02/10/1 Comments URL: https://news.ycombinator.com/item?id=30291958 Points: 2 # Comments: 0  ( 6 min )

Immunefi has grown by leaps & bounds since we first launched in December 2020 and now protects over $100 billion (that’s Billion with a B)… Continue reading on Immunefi »  ( 2 min )

Codes are fundamental blocks of logic which drives businesses all around the world today. Continue reading on Medium »  ( 6 min )

Objectives of day 6 : Continue reading on Medium »  ( 1 min )

Objectives of day 5 : Continue reading on Medium »  ( 1 min )

Our mission to establish the Superfluid Protocol as a key component of the financial rails of the future requires more than technological… Continue reading on Superfluid Blog »  ( 3 min )

Hi, Here we will see how you can buy any product for free from Bewakoof.com Continue reading on Medium »  ( 2 min )

At RedHunt Labs, (under Project Resonance), we frequently conduct internet-wide research in different shapes and formats to understand the… Continue reading on Medium »  ( 7 min )

السلام عليكم ورحمة الله وبركاته Continue reading on Medium »  ( 1 min )

Today as I was scrolling through my LinkedIn’s home feed I came across this image that had been liked by someone from my network. Continue reading on Medium »  ( 3 min )

Task Continue reading on Medium »

Shopify disclosed a bug submitted by francisbeaudoin: https://hackerone.com/reports/1083922 - Bounty: $1900

Shopify disclosed a bug submitted by danishalkatiri: https://hackerone.com/reports/1015283 - Bounty: $500

Shopify disclosed a bug submitted by danishalkatiri: https://hackerone.com/reports/1092831

Shopify disclosed a bug submitted by scaramouche31: https://hackerone.com/reports/1392032 - Bounty: $800

Semrush disclosed a bug submitted by a_d_a_m: https://hackerone.com/reports/1022048 - Bounty: $5000

GitLab disclosed a bug submitted by iwis: https://hackerone.com/reports/970869 - Bounty: $1500

GitLab disclosed a bug submitted by jafarakhondali: https://hackerone.com/reports/1417211 - Bounty: $100

Node.js disclosed a bug submitted by bengl: https://hackerone.com/reports/1429694

Hi, what's the difference between RCE and Code Injection ? submitted by /u/Spare_Prize1148 [link] [comments]  ( 1 min )

I accidentally discovered something like that during a very beginners CFT challenge. We were supposed to do an SQL injection to get a config file but I for some reason put config.php in the URL and got the file to the browser. I reported it to the people holding the CFT and they said they reported it to the maker of the serversoftware. I believe the software was opensource so it would be fun to find a note somewhere that they fixed it. That is why I wonder what this type of vulnerability is called. submitted by /u/HugoTRB [link] [comments]  ( 2 min )

I am going to create a set of servers for pentest and I would like your suggestions/advice/comments. I would buy three servers , one for exploit dev /marvel analysis preferably a debian(kali or Ubuntu ) and other two for pentesting . submitted by /u/Sea_Finish6689 [link] [comments]  ( 3 min )

Hello, folks! Our Email Forensics Capture The Flag Competition is now live! The event comprises weekly challenges for ten weeks. https://m.klr.co/kMhMA Good luck, and have fun! submitted by /u/MetaspikeHQ [link] [comments]  ( 1 min )

I'm not sure if this is the correct place to post, apologies if it isn't. I have downloaded the SIFT Workstation OVA file from Sans website and opened it in VirtualBox. I get a boot menu where I can either just start Ubuntu or run the memory test application. Choosing Ubuntu, I just get a black screen with a flashing underscore cursor in top left corner. It has been standing there for 10 minutes now and nothing happens. It never gets to the logon screen. I have seen others mention the issue when searching for it, but I haven't found any mentioned solutions. Any ideas? submitted by /u/kennethfinnerup [link] [comments]  ( 1 min )

So I was nosing around an old HDD that had XP installed , and I come across these folders in the WINDOWS directory. Inside them, there are files called “spuninst”. So I open them in notepad and there is a system.snapshot heading with a bunch of programs and such listed. My first question is- Is this every program that was installed at this particular moment in time on the computer? Is there way to see when past programs were installed and subsequently deleted if there are no files to look at creation dates? Thanks for any help submitted by /u/Pubh12 [link] [comments]  ( 1 min )

Article URL: https://security.googleblog.com/2022/02/vulnerability-reward-program-2021-year.html Comments URL: https://news.ycombinator.com/item?id=30289291 Points: 1 # Comments: 0  ( 12 min )

Article URL: https://www.hsgac.senate.gov/hearings/responding-to-and-learning-from-the-log4shell-vulnerability Comments URL: https://news.ycombinator.com/item?id=30284252 Points: 1 # Comments: 0  ( 1 min )

Top 10 web hacking techniques of 2021 by ourren A Tale of DOM-based XSS! by ourren 利用RITA检测beacon通信 by ourren CVE-2021-33742：Internet Explorer MSHTML堆越界写漏洞分析 by ourren 企业面对APT化攻击的防御困境 by ourren CobaltStrike 区块链网络上线方式及检测 by ourren 更多最新文章，请访问SecWiki  ( 2 min )

submitted by /u/Boobalizer [link] [comments]

http://www.nastyflixxx.net/clips/?C=S;O=A submitted by /u/mrcave81 [link] [comments]

https://www.nhc.noaa.gov/video/ Nothing really that interesting submitted by /u/420danger_noodle420 [link] [comments]

You can find some good stuff in it I thinks ? http://ftp.ufanet.ru/ Url: http://ftp.ufanet.ru/ Urls file Extension (Top 5) Files Size .iso 363 384,42 GiB .xz 283 105,96 GiB .img 136 52,78 GiB .tar 16 647 29,78 GiB .bz2 112 29,21 GiB Dirs: 10 532 Ext: 188 Total: 24 123 Total: 664,74 GiB Date (UTC): 2022-02-10 01:01:31 Time: 00:03:28 Speed: 2,01 MB/s (16,1 mbit) Created by [KoalaBear84's OpenDirectory Indexer v2.3.0.0](https://github.com/KoalaBear84/OpenDirectoryDownloader/) submitted by /u/VoXaN24 [link] [comments]

https://www.the8bitguy.com/wp-content/uploads/ ​ https://tomorrowcorporation.com/blog/wp-content/uploads/ submitted by /u/ilikemacsalot [link] [comments]

https://download.d-l.fr/apache_listing/ or https://download.d-l.fr (It's the same content but different UI ) http://s472165864.onlinehome.fr/anywarare/index.php?dir=| Url: https://download.d-l.fr/apache_listing/ Urls file Extension (Top 5) Files Size .iso 112 233,52 GiB .zip 101 24,71 GiB .exe 169 17,93 GiB .xz 7 4,65 GiB .1 1 4,4 GiB Dirs: 150 Ext: 46 Total: 572 Total: 296,05 GiB Date (UTC): 2022-02-10 00:55:22 Time: 00:00:35 Speed: 23,48 MB/s (187,8 mbit) Created by [KoalaBear84's OpenDirectory Indexer v2.3.0.0](https://github.com/KoalaBear84/OpenDirectoryDownloader/) Url: http://s472165864.onlinehome.fr/anywar... Urls file Extension (Top 5) Files Size .zip 808 69,32 GiB .iso 26 63,33 GiB .exe 604 60,11 GiB .001 2 6,6 GiB .002 2 6,4 GiB Dirs: 285 Ext: 23 Total: 1 868 Total: 212,62 GiB Date (UTC): 2022-02-10 00:59:03 Time: 00:00:09 Speed: Failed Created by [KoalaBear84's OpenDirectory Indexer v2.3.0.0](https://github.com/KoalaBear84/OpenDirectoryDownloader/) submitted by /u/VoXaN24 [link] [comments]  ( 1 min )

submitted by /u/Can0pen3r [link] [comments]

In this post, you will get a very thorough step-by-step walkthrough on building your own process token dumper in the c++ which will help you in knowing your target better before launching another post exploitation attack. https://tbhaxor.com/dumping-token-information-in-windows/ submitted by /u/tbhaxor [link] [comments]

2.14-2.17，来FB商城过元宵吧

据Cyber​​News安全研究人员发现，5个伪装成著名BT盗版资源网站海盗湾的恶意站点，每月向超过700万名用户提供恶意广告。  ( 1 min )

《征求意见稿》共六章三十二条，加强数字政府公共数据安全管理，规范公共数据处理活动，促进数据资源有序开发利用，保护个人、组织的合法权益。

记一次挖矿病毒的应急响应  ( 1 min )

流程分为两个方面，解包可以挖掘信息泄露问题、隐藏的接口，抓包可以测试一些逻辑漏洞、API安全问题。  ( 1 min )

就在Windows 11系统广泛部署阶段，RedLine恶意软件团伙已经悄悄盯上了这波更新，已经做好了充足的攻击前准备。  ( 1 min )

CyberNews 的研究人员发现了五个海盗湾的克隆版本，每个月向超过 700 万用户提供恶意广告。  ( 1 min )

I'm trying to find the server so I can ping to that manually but I don't know if that's possible. I'm almost a beginner in this, I want to know the pinging time. submitted by /u/Mayhem_8116 [link] [comments]  ( 1 min )

Hi Netsec people! Every once in a while I will get emails saying that some website/service I’m registered on has reset my password because of too many failed log in attempts. Now I’m not too surprised by the attempts, since according to HaveIBeenPwned, my credentials have been ‘exposed’ over 30 times in breaches dating back to the early 2010s. However, a while back I gave up my terrible practice of using 1 password across multiple services and migrated to using a password manager, and now all of my passwords to every service I’m on are randomly generated, so I’m not too worried by these attempts. My question is this: Why does the most common practice seem to be for services to reset your password after a few failed attempts? To me that seems like if x log in attempts failed, the password was robust/held up—why force the user to change it? If the user used a random generator, repeated tries that are time separated (I.e. wait 10min before trying again) probably won’t get an attacker anywhere. If a person isn’t using a password manager/generator then forcing the user to reset might actually lead them to use a weaker password since they will have to come up with something familiar, and there are only so many familiar items a person can keep track of at a time… I’d love to hear some insights on to why this reset after x tries approach appears to be such a pervasive (and counterintuitive) practice! Sorry if this isn’t the right place for a question like this! submitted by /u/KrishanuAR [link] [comments]  ( 2 min )

I have some infected hosts in LAN making a communication with C&C server and bots but that URL seems to be hidden behind Cloudflare CDN as per wireshark sniffing on infected host. In other words, I must say hosts are making DNS queries to malicious site. Our PAs with DNS filtering has blocked the domain since it flagged as malicious How I can find the source of infection on the host ? Any tools I can use which process or application making DNS queries ? Any advise how to dig deeper and what process is making these queries so we can get rid of these logs ? submitted by /u/techno_it [link] [comments]  ( 3 min )

Known Palestinian threat actor MoleRats is likely behind a recent malicious email campaign targeting Middle Eastern governments, foreign-policy think tanks and a state-affiliated airline with a new intelligence-gathering trojan dubbed NimbleMamba, researchers said via Threatpost. https://threatpost.com/molerats-apt-trojan-cyberespionage-campaign/178305/ submitted by /u/Technical-Tea-4902 [link] [comments]  ( 1 min )

Hi, what's the difference between RCE and Command Injection ? submitted by /u/Spare_Prize1148 [link] [comments]  ( 1 min )

So a long time ago some of the higher ups decided we should have a security program within our product development, the idea was that there would be one person in each scrum team responsible for promoting security and they would get some additional training to help with that. Like a lot of these central programs it continued for a few months and then was quickly forgotten about. Now I've been tasked with setting up our own version in the division as the central version is pretty much dead but they're still pushing the general idea. This is what is currently on my list - Security champions to be Security+ certified (I know it's a broad basic cert but I figure we can get funding for this and then progress to more advanced targeted training) - Add a method into Jira for tracking security related issues separately - Create discrete security projects as epics so we can fix some of the legacy issues completely and not worry about them anymore (current ideas for these include: removing third party services to reduce exposure, updating some very old libraries, updating SQL user security etc) Any other ideas of things I could introduce? submitted by /u/dbxp [link] [comments]  ( 3 min )

Hello AskNetsec. I was wondering if there is a resource describing the CVSS calculation reasoning. Not just how the CVSS is calculated by also the reasoning behind the weight of the different variables. For example in the specification (https://www.first.org/cvss/specification-document) under "CVSS v3.1 Equations", WHY is ISS = 6.42 * ISS? Where does 6.42 come from. Is there any research paper or whitepaper for this? submitted by /u/someuserman [link] [comments]  ( 1 min )

Do I need to patch / install a new version of Python manually, in order to fix the vulnerability of Python on my macOS? For example, my macOS is upgraded to Monterey 12.1, but my Python version is still 3.7.9, which is vulnerable to CVE-2021-3177. I tried to search the vulnerability, say CVE-2021-3177 is that affected my version of macOS. However, Apple seems didn't put that information into their security update documentation. submitted by /u/20151124 [link] [comments]  ( 1 min )

submitted by /u/Jazzlike-Vegetable69 [link] [comments]

submitted by /u/jat0369 [link] [comments]

submitted by /u/albinowax [link] [comments]  ( 1 min )

submitted by /u/gsk-upxyz [link] [comments]

Shopify disclosed a bug submitted by ngalog: https://hackerone.com/reports/1102546 - Bounty: $500

Shopify disclosed a bug submitted by ngalog: https://hackerone.com/reports/1102660 - Bounty: $500

Shopify disclosed a bug submitted by ngalog: https://hackerone.com/reports/1102652 - Bounty: $900

Zomato disclosed a bug submitted by 0xdexter: https://hackerone.com/reports/1409913 - Bounty: $150

TikTok disclosed a bug submitted by imran_nisar: https://hackerone.com/reports/1452375 - Bounty: $6000

Article URL: https://github.blog/2022-02-09-coordinated-vulnerability-disclosure-cvd-open-source-projects/ Comments URL: https://news.ycombinator.com/item?id=30278015 Points: 1 # Comments: 0  ( 8 min )

Hello Guys Myself Manan Aggarwal BTech Student is here Present you the information about the Basic Technology which you need to require… Continue reading on Medium »  ( 4 min )

Rake is a utility that can be used to automate tasks. For a example, if program needs to be set up in a certain way. Rake could be used to… Continue reading on Medium »

Hello Everyone 👋 Continue reading on Medium »  ( 1 min )

Hey Guys, This is Harish! I used to hunt to Microsoft and Google VRP, This is my first write up! Continue reading on Medium »  ( 1 min )

A complete guide how to exploit clickjacking and how to prevent it. Continue reading on InfoSec Write-ups »  ( 3 min )

TL; DR: Continue reading on Medium »  ( 1 min )

Repost of the 2011–11–05 news on xdag.io Continue reading on Medium »  ( 1 min )

repost of 2021–05–09 news on xdag.io Continue reading on Medium »  ( 4 min )

Hello to all, As some of you know, we are currently working on making the project more attractive to developers. Continue reading on Medium »  ( 2 min )

Input: User id and Password SQL: select * from admin where user_id = 'admin' and password=’****' Continue reading on Medium »

Prior Work Continue reading on Posts By SpecterOps Team Members »  ( 3 min )

I had a certificate by successfully completing the CRTO exam in the past days, and while my knowledge was still fresh, I decided to write… Continue reading on Medium »  ( 4 min )

Kurulum Continue reading on Medium »  ( 1 min )

Write-ups TryHackMe Challege  ( 3 min )

Showing all the tools and techniques needed to complete the box. Continue reading on InfoSec Write-ups »  ( 6 min )

writeup  ( 3 min )

In this article, I use NetworkMiner, Wireshark and Brim to analyze a PCAP file that captured network traffic belonging to an Angler…  ( 9 min )

Introduction about SSRF attack can be read on separated medium post Beginner Guide To Exploit Server Side Request Forgery (SSRF)…  ( 3 min )

A complete guide how to exploit clickjacking and how to prevent it.  ( 3 min )

Today we will learn about NoSql Injection, as you know this is my first time of NoSql Injection, so I was learning a lot from tryhackme.  ( 3 min )

Get all the writeups from Day 1 to 21, Click Here Or Click Here.  ( 7 min )

Host Header injection is not the type of attack that you would normally find in CTFs or security challenges. However, it is widespread in…  ( 4 min )

The hacker Aleksey hacks TryHackMe’s LazyAdmin room. They assumed because the admin is “lazy,” that this would be easy. They were so wrong. Continue reading on InfoSec Write-ups »  ( 6 min )

Write-ups TryHackMe Challege  ( 3 min )

Showing all the tools and techniques needed to complete the box. Continue reading on InfoSec Write-ups »  ( 6 min )

writeup  ( 3 min )

In this article, I use NetworkMiner, Wireshark and Brim to analyze a PCAP file that captured network traffic belonging to an Angler…  ( 9 min )

Introduction about SSRF attack can be read on separated medium post Beginner Guide To Exploit Server Side Request Forgery (SSRF)…  ( 3 min )

A complete guide how to exploit clickjacking and how to prevent it.  ( 3 min )

Today we will learn about NoSql Injection, as you know this is my first time of NoSql Injection, so I was learning a lot from tryhackme.  ( 3 min )

Get all the writeups from Day 1 to 21, Click Here Or Click Here.  ( 7 min )

Host Header injection is not the type of attack that you would normally find in CTFs or security challenges. However, it is widespread in…  ( 4 min )

The hacker Aleksey hacks TryHackMe’s LazyAdmin room. They assumed because the admin is “lazy,” that this would be easy. They were so wrong. Continue reading on InfoSec Write-ups »  ( 6 min )

2022勒索软件和恶意软件报告 by ourren 更多最新文章，请访问SecWiki  ( 2 min )

submitted by /u/lnsideMyHead [link] [comments]

submitted by /u/mingaminga [link] [comments]

submitted by /u/mingaminga [link] [comments]

http://103.222.20.150/ftpdata/ Url: http://103.222.20.150/ftpdata/ Urls file Extension (Top 5) Files Size .mp4 12,912 11.59 TiB .mkv 9,042 9.3 TiB .avi 2,965 1.38 TiB .rar 21 36.18 GiB 16 19.15 GiB Dirs: 16,920 Ext: 59 Total: 46,363 Total: 22.4 TiB Date (UTC): 2022-02-08 23:34:44 Time: 01:48:31 Speed: 0.00 MB/s (0.0 mbit) Created by [KoalaBear84's OpenDirectory Indexer v2.3.0.1](https://github.com/KoalaBear84/OpenDirectoryDownloader/) submitted by /u/VoXaN24 [link] [comments]  ( 1 min )

Article URL: https://research.ifcr.dk/spoolfool-windows-print-spooler-privilege-escalation-cve-2022-22718-bf7752b68d81?gif=true Comments URL: https://news.ycombinator.com/item?id=30273774 Points: 3 # Comments: 1  ( 11 min )

Article URL: https://jub0bs.com/posts/2022-02-08-cve-2022-21703-writeup/ Comments URL: https://news.ycombinator.com/item?id=30270751 Points: 1 # Comments: 0  ( 10 min )

On Dec 20, 2021, OSINT Dojo shared a OSINT quiz with us. The objective was simple. We had to figure out where the photo was taken… Continue reading on Medium »  ( 1 min )

In this article I will explain how to solve Hacktoria’s Geolocation 10 challenge. However, I must give a quick disclaimer first. I already… Continue reading on Medium »  ( 5 min )

I deleted a very important conversation on WhatsApp 2 days ago. The iPhone 12 (running iOS 15.x) in question has been powered off and hasn't been used since. I understand that WhatsApp saves a backup copy in Android phones' local memory everyday at 2am and erase them every 7 days, however I can't find anything about iOS devices. To make matter worse, I deleted the conversation around 7pm, so before the local backup could trigger at 2am. Is there any chance to get this conversation back without any backup? And what would my chances be with a Cellebrite device? submitted by /u/Strangedreamest [link] [comments]  ( 2 min )

《征求意见稿》共六章，分别是范围、规范性引用文件、术语和定义、缩略语、概述和生命周期管理，对安全需求、安全建议、安全管理等给出了指导意见。

沃达丰葡萄牙分公司遭受网络攻击，导致该国通讯和电视服务严重中断。  ( 1 min )

一个疑点：真正攻击 Bitfinex 的盗币黑客是谁？  ( 1 min )

近期，加拿大男子Sebastian Vachon-Desjardins因参与NetWalker勒索攻击，被判处6年零八个月监禁。

SSRF漏洞形成的原因主要是服务器端所提供的接口中包含了所要请求内容的URL参数，并且未对客户端所传输过来的URL参数进行过滤。  ( 1 min )

运动服装制造商Puma在2021年12月对其北美劳动力管理服务提供商之一Kronos发起勒索软件攻击后，遭到数据泄露。

【编者按】工业组织在2021年面临重大挑战。对佛罗里达州Oldsmar供水设施、Colonial管道和JBS的网络攻击，以及Solar  ( 1 min )

犯罪分子能够利用偷来的照片以其他方式获得钱财，如敲诈或性骚扰等。  ( 1 min )

“据五位知情人士透露，以色列监控公司 NSO Group 在 2021 年利用苹果软件中的一个漏洞 侵入 iPhone，同时也被一家竞争公司滥用。” 根据路透社发表的文章，“有人透露这家名为的QuaDream 是一家规模较小、知名度较低的以色列公司，它还为政府客户开发智能手机黑客工具。”QuaDream是由以色列前军官 Ilan Dabelstein 和两名前 NSO 员工 Guy Geva 和  ( 1 min )

微软宣布已在Win10/11系统中暂时禁用MSIX应用程序安装器的ms-appinstaller 协议，以防被恶意软件滥用。

2022年2月8日，微软发布了一系列的漏洞补丁，共修复48 个漏洞，以及一个零日漏洞。  ( 1 min )

《规划》提出要强化金融网络安全标准防护。健全金融业网络安全与数据安全标准体系。 建立健全金融业关键信息基础设施保护标准体系，支持提升安全防护能力。

Hello AskNetSec! I am curious what you all would consider an appropriate response to an incident such as a user reporting that they've clicked on a phishing link. Personally, I believe it is appropriate to probe about what popped up after clicking the link, whether or not they entered any of their information, and whether or not they notice any abnormal behavior on their computer after clicking on the link. After that, have the user change their password as a precaution and move on begin monitoring. I figure between the questions assuring they did nothing more than click, a password change, existing security controls such as CrowdStrike, and monitoring for abnormal behavior, there isn't much more that makes sense to do. Others on my team seem to think it's worth downloading Microsoft Safety Scanner and running a full system scan, which I argue doesn't hurt, but also probably doesn't add much value unless something is seen on the user's computer that would prompt further investigation. Especially since I can't imagine Microsoft Safety Scanner is going to pick up on something that CrowdStrike does not. Understandably, different companies may expect different responses based on established policy and regulations. But I want to leave it kind of open ended and see what other IT and security professionals believe is appropriate for these types of incidents? How deep do you go for these types of things? submitted by /u/unseenspecter [link] [comments]  ( 2 min )

When looking to purchase Incident Response Retainers what are things you wish you knew prior to purchasing? Is there any gotchas that should be considered? What can I learn from you in your experience with this? submitted by /u/gnomeparadox [link] [comments]  ( 3 min )

Each of the sub-branches of cyber security is like a different world for itself, there is no end when you want to learn. For example, we agree that it is necessary to have knowledge about malware analysis for the position of security analyst. However, if you try to improve yourself in malware analysis, you can probably only work on malware analysis for years. At this point, many people do not know how much technical knowledge required to get started. For this reason, many people can not be accepted to the job due to an insufficient level in job applications, or the starting process may take longer as people spends too much time on training and develops technical knowledge more than the level required to start the job. In your opinion, what should be the technical level required to start working in the security analyst position? submitted by /u/umuttosun [link] [comments]  ( 2 min )

Hi, I'm a CS student who's been learning a mishmash of basics to get into infosec — some assembly, wifi cracking, sql injection, etc under my belt, just the very basics, but I'm kind of overwhelmed by how... Enthusiastic and into it everyone seems to be. I'm not sure I'm "built" for it either, since I can't relate to the culture about stuff like lockpicking and causing trouble in school networks and stuff. Never done any social engineering in my life. I'm more of a science guy, and I went into CS because I'm aiming for a practical job that's in STEM. That's it, really. I'm willing to learn things in my spare time but I can't dredge up the same intense curiosity I see in people I've seen both IRL and online in security. Will I drown? Should I look elsewhere? submitted by /u/Wild_Rutabaga_3099 [link] [comments]  ( 4 min )

I was wondering what you're malware playbooks look like. We got a bunch of malware alerts today for items that were deleted by the av. It caused some internal discussions on common practices. submitted by /u/xX_s0up_Xx [link] [comments]  ( 1 min )

submitted by /u/AlmightyMemeLord404 [link] [comments]  ( 3 min )

I see a wide range of pricing for the PA-200 through 400 models and am not sure why. Anybody else running a small PAN device in their homelab have insight on purchasing a refurb and maybe one or two subscriptions setup on it? Is it best to look for an authorized dealer or is eBay safe? submitted by /u/EnterNam0 [link] [comments]  ( 1 min )

There’s countless article on hacking kubernetes clusters but is there any research or repos on how you can use k8s for pen testing? One idea is using a cluster in which each node is a “person” that has access to a specific machine or to a different machine. I’m open to other ideas regarding the usage of k8s to improve hacking automation submitted by /u/sirlordjax [link] [comments]  ( 1 min )

submitted by /u/dmchell [link] [comments]

submitted by /u/dmchell [link] [comments]  ( 1 min )

Some Linux and Windows (Some in Pt/de/ru/en) ISO, The server has a pretty decent speed Url: https://root3.minerswin.de/ISO/ Urls file Extension (Top 5) Files Size .iso 102 195,47 GiB .zip 50 60,06 GiB .xz 18 14,95 GiB .ova 4 11,6 GiB .7z 2 3,7 GiB Dirs: 71 Ext: 12 Total: 323 Total: 288,59 GiB Date (UTC): 2022-02-08 23:22:22 Time: 00:00:03 Speed: 46,65 MB/s (373,2 mbit) Created by [KoalaBear84's OpenDirectory Indexer v2.3.0.1](https://github.com/KoalaBear84/OpenDirectoryDownloader/) submitted by /u/VoXaN24 [link] [comments]

http://5.196.72.204/ Url: http://5.196.72.204/ Urls file Extension (Top 5) Files Size .mkv 141 459,53 GiB .avi 99 70,71 GiB .mp4 533 51,46 GiB .tar 1 28 GiB .m2ts 33 27,8 GiB Dirs: 532 Ext: 58 Total: 4 362 Total: 683,72 GiB Date (UTC): 2022-02-08 23:08:45 Time: 00:00:07 Speed: 11,11 MB/s (88,9 mbit) Created by [KoalaBear84's OpenDirectory Indexer v2.3.0.1](https://github.com/KoalaBear84/OpenDirectoryDownloader/) submitted by /u/VoXaN24 [link] [comments]

http://www.zoppello.fr/download/ Url: http://www.zoppello.fr/download/ Urls file Extension (Top 5) Files Size .mkv 937 668,57 GiB .avi 66 68,38 GiB .mp4 61 22,63 GiB .ts 5 17 GiB .flv 17 7,07 GiB Dirs: 187 Ext: 15 Total: 1 405 Total: 790,34 GiB Date (UTC): 2022-02-08 23:07:02 Time: 00:00:04 Speed: 11,05 MB/s (88,4 mbit) Created by [KoalaBear84's OpenDirectory Indexer v2.3.0.1](https://github.com/KoalaBear84/OpenDirectoryDownloader/) submitted by /u/VoXaN24 [link] [comments]

Hey everyone looking for South Park season downloads thanks in advance submitted by /u/Los-Aragon [link] [comments]

submitted by /u/IamaCerealKilla [link] [comments]

submitted by /u/ly4k_ [link] [comments]  ( 1 min )

submitted by /u/jat0369 [link] [comments]

submitted by /u/0xdeadbeef0000 [link] [comments]

submitted by /u/Hefty_Knowledge_7449 [link] [comments]  ( 1 min )

submitted by /u/Jazzlike-Vegetable69 [link] [comments]  ( 1 min )

Article URL: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21991 Comments URL: https://news.ycombinator.com/item?id=30262516 Points: 8 # Comments: 0

Objectives of day 4 : Continue reading on Medium »  ( 1 min )

Hi there, 7odamo is here. First of all this is my first write-up and i am still beginner, So i might write something wrong,Then it’s… Continue reading on Medium »  ( 3 min )

woohoo, sup fellow hackers. it’s day 3 / 100 we have a long way to go. Continue reading on Medium »  ( 1 min )

Hi there, thanks for stopping by and taking some time to read my blog post about how I helped secure my favorite chess playing which if… Continue reading on Medium »  ( 1 min )

This blog is about how to use Wildcard Injection to escalate privileges to root in Unix-like OS. Continue reading on System Weakness »  ( 2 min )

Hi everyone, I hope we’re all having a swell day. Before I jump into today's bug report, I’d like to express my sincerest gratitude for… Continue reading on Medium »  ( 2 min )

Book your seats today! Continue reading on InfoSec Write-ups »  ( 2 min )

In the Web2 world, a simple oversight in the code doesn’t always result in a huge breach of data (of course, sometimes they do). In Web3… Continue reading on Immunefi »  ( 4 min )

Hello lads, it’s me again. Let’s discuss different techniques about bypassing 2FA. Continue reading on Medium »  ( 2 min )

Thank you for taking the time to read about “ You Can Takeover Any GOOGLE Account ! ” Continue reading on Medium »  ( 2 min )

This article was written in collaboration with Aardwarewolf Continue reading on Medium »  ( 7 min )

The dangers of oversharing Continue reading on Medium »  ( 8 min )

Hello everyone...super noob alert: I'm taking a digital forensics class and rather than using the virtual lab decided to do some memory analysis on my machine. Since I know little about computers and even less about what I'm looking at, maybe I'm being paranoid, but maybe you can shed some light? As I don't know the email addresses, nor do email addresses like "stealerbyframe@mail.ru", "360saftfirehackr@qq.com", or my favorite "pizda@qq.com"--inspire confidence, those addresses raised some alarms. I used FTK Imager to do a memory dump on my system. I then used Bulk Extractor to organize the data a bit and the screen shot is some emails I found in the email.txt file result. Why, for example, are they in my computer's memory!? https://preview.redd.it/9orfvtravmg81.png?width=1326&format=png&auto=webp&s=65d81163bcd0e35d26a7cc2c88a5025762e36d9a https://preview.redd.it/80togtravmg81.png?width=509&format=png&auto=webp&s=3d14c00dbe7395beb8e682bd2fe0cc50e7d66277 submitted by /u/Funny-Appearance9167 [link] [comments]  ( 2 min )

submitted by /u/DFIRScience [link] [comments]  ( 1 min )

今日暂未更新资讯~ 更多最新文章，请访问SecWiki  ( 2 min )

submitted by /u/pat_ventuzelo [link] [comments]

submitted by /u/pat_ventuzelo [link] [comments]

Acronis disclosed a bug submitted by quadrant: https://hackerone.com/reports/1161241 - Bounty: $50

Acronis disclosed a bug submitted by h4x0r_dz: https://hackerone.com/reports/1122513 - Bounty: $50

Acronis disclosed a bug submitted by ashmek: https://hackerone.com/reports/1018790

Acronis disclosed a bug submitted by h4x0r_dz: https://hackerone.com/reports/1124974 - Bounty: $250

Acronis disclosed a bug submitted by h4x0r_dz: https://hackerone.com/reports/1121771

六方云结合2021年50篇安全态势周刊内容，详细分析全球工业安全现状，多方位感知工业安全态势，为工业安全相关责任人员提供有效的参考。  ( 1 min )

渗透测试、漏洞挖掘或安全研究的过程中，我们会遇到很多无回显的命令执行点。  ( 1 min )

Meta 威胁称，如果欧盟不允许该公司的美国运营、应用程序和数据中心分享欧盟用户数据，将考虑退出欧洲。  ( 1 min )

应急响应文章很多，但如何使用SANS、NIST框架模型落地应急响应文章略少，仅以个人观点针对当前X站钓鱼邮件案例进行简单模型化分析  ( 1 min )

泄露的数据类型包括：姓名、地址、社会安全号码、出生日期、客户识别号码、医疗诊断和治疗信息以及健康保险信息。

《指引》共六章三十八条，主要对企业的数据合规管理架构与风险识别处理规范作出了规定。

Article URL: https://nvd.nist.gov/vuln/detail/CVE-2021-4160 Comments URL: https://news.ycombinator.com/item?id=30256773 Points: 2 # Comments: 0  ( 4 min )

Book your seats today!  ( 2 min )

Book your seats today!  ( 2 min )

Mostly 320kbit mp3. Complete collections. Great KISS folder. http://nordserv.no/english/ submitted by /u/inoculatemedia [link] [comments]

https://www.aidd.org/conspiracy/03/sounds/mp3s/ submitted by /u/inoculatemedia [link] [comments]

http://bawkawajwanw.com/Music/ submitted by /u/inoculatemedia [link] [comments]

submitted by /u/Goldmann_Sachs [link] [comments]  ( 1 min )

The following is a monthly conglomeration of articles, sites and techniques that we have found both interesting, and beneficial, to our… Continue reading on Medium »  ( 2 min )

On Jan 17, 2022, OSINT Dojo shared a new OSINT quiz with us. The objective was simple. We had to figure out where the photo was taken… Continue reading on Medium »  ( 1 min )

Introduction Team Qualys discovered a local privilege escalation vulnerability in PolicyKit’s (polkit) setuid tool pkexec which allows low-level users to run commands as privileged users. The post Linux Privilege Escalation: PwnKit (CVE 2021-4034) appeared first on Hacking Articles.  ( 5 min )

Article URL: https://tailscale.com/security-bulletins/#ts-2022-001 Comments URL: https://news.ycombinator.com/item?id=30248447 Points: 2 # Comments: 0  ( 1 min )

Article URL: https://research.nccgroup.com/2022/02/07/a-deeper-dive-into-cve-2021-39137-a-golang-security-bug-that-rust-would-have-prevented/ Comments URL: https://news.ycombinator.com/item?id=30244773 Points: 4 # Comments: 0  ( 7 min )

About Us: Detect, Prioritize and Negate Cloud Security Threats that matter! https://pingsafe.com Continue reading on Medium »  ( 3 min )

Remote code execution (RCE) is a class of software security flaws/vulnerabilities. RCE vulnerabilities will allow a malicious actor to… Continue reading on Medium »  ( 1 min )

What is subdomain? Continue reading on Medium »  ( 3 min )

BFAC (Backup File Artifacts Checker): Tool to check backup artifacts that may disclose the web-application’s source code | Sensitive… Continue reading on Medium »  ( 1 min )

This scamster aka https://tonycapo.net/ or whatever his real name is, has been scamming people since 2019, There are multiple bad reviews… Continue reading on Medium »  ( 1 min )

We at DefCore Security intend to provide great visibility to clients while working on the pentest engagement. We give our clients the… Continue reading on Medium »  ( 3 min )

Hello All, if you ever tried running shodan in Kali Linux and got shodan init error. Then keep reading….! Continue reading on Medium »  ( 1 min )

Bug Bounty programs can be a great thing for both the organization, as well as for the hacker. The question is, can every organization… Continue reading on Medium »  ( 3 min )

Cre: Machevalia’s Blog Continue reading on Medium »  ( 2 min )

Exam Information Continue reading on Medium »  ( 2 min )

submitted by /u/dlorenc [link] [comments]

submitted by /u/jandrusk [link] [comments]  ( 2 min )

submitted by /u/TheDFIRReport [link] [comments]

submitted by /u/digicat [link] [comments]  ( 1 min )

submitted by /u/netbiosX [link] [comments]

submitted by /u/TryptamineEntity [link] [comments]  ( 1 min )

submitted by /u/dashboard_monkey [link] [comments]  ( 1 min )

submitted by /u/intruderK [link] [comments]  ( 1 min )

Reddit disclosed a bug submitted by e100_speaks: https://hackerone.com/reports/1168804

Nextcloud disclosed a bug submitted by rohitburke: https://hackerone.com/reports/1211061

ML-DOCTOR：对机器学习模型推理攻击的全局性研究 by ourren 黑灰产识别与溯源 by ourren 侠盗猎车 -- 玩转滚动码（中) by ourren 更多最新文章，请访问SecWiki  ( 2 min )

Article URL: https://portswigger.net/daily-swig/email-platform-zimbra-issues-hotfix-for-xss-vulnerability-under-active-exploitation Comments URL: https://news.ycombinator.com/item?id=30246174 Points: 1 # Comments: 0  ( 4 min )

submitted by /u/TheDFIRReport [link] [comments]  ( 1 min )

submitted by /u/netbiosX [link] [comments]

submitted by /u/5ub34x_ [link] [comments]  ( 1 min )

submitted by /u/intruderK [link] [comments]

Microsoft has introduced Windows Hello for Business (WHfB) to replace traditional password based authentication with a key based trust model. This implementation uses PIN or… Continue reading → Shadow Credentials  ( 7 min )

Microsoft has introduced Windows Hello for Business (WHfB) to replace traditional password based authentication with a key based trust model. This implementation uses PIN or… Continue reading → Shadow Credentials  ( 7 min )

该软件的广泛使用和易于利用使它成为一个极其严重的漏洞，而DHS的最佳实践是集中精力对log4j软件库和相关补救过程中的漏洞进行审查。  ( 1 min )

LockBit勒索软件团伙称从PayBito加密货币交易所窃取了大量客户数据。  ( 1 min )

瑞士国际空港服务有限公司（Swissport International Ltd.）遭勒索软件攻击，导致多趟航班延误。

据公开数据统计，至2021年中，移动互联网用户规模已达到10.07 亿。  ( 1 min )

本文从三个方面，即新内容、新方向和新力量，介绍与分析了2021年度威胁框架ATT&CK在研究与应用方面的新进展。  ( 1 min )

随着数字化、网络化、智能化的深入发展，大数据、云计算、区块链、AI等技术的变革，不断催生出各行业的新业态。  ( 1 min )

自2021年1月到2021年12月，微软阻止了超过256亿次 Azure AD暴力验证攻击，并拦截了357亿封网络钓鱼电子邮件。  ( 1 min )

Hi everyone, I'm currently working as an information security analyst for this non-tech company here in Montreal Canada for 9 months already. I have 7 years of total work experience (5 years customer service, 2 years as an IT tech + SysAdmin). I have the Azure Security Engineer Associate AZ-500 certification. I'm currently paid 60k CAD Since I'm the only security analyst in my organization, I'm the only one leading multiple security projects. My company have multiple divisions across Canada, South America and Asia with around 1000 employees. My first project after landing the job was the deployment of Bitlocker on every laptop and modern desktop in the company. One of the big project I'm currently running alone is the architecting and deployment of MFA across all employees and all our divisions + deployment of a new VPN solution for employees, with Multi Factor Authentication on every VPN connection. My biggest duties outside of projects are threat detection and response, training and security awareness to employees, and patching old and vulnerable systems. I think I was lucky to find a security role with no prior security experience, but I feel like I'm underpaid. And my annual evaluation is coming in a month. Should I look around for jobs that could pay me better? Should I meet with my manager and ask for a raise ? Thank you Edit: added "architecting MFA" submitted by /u/hey_its_meeee [link] [comments]  ( 2 min )

submitted by /u/notburneddown [link] [comments]  ( 3 min )

Hello, I’m Taha. Today, I’ll go over one of the vulnerabilities I was rewarded for last month. I hope you enjoy this write-up. Continue reading on Medium »  ( 1 min )

Hello Hacker’s & Security Guys Thanks for Your Support So Continue reading on Medium »  ( 1 min )

Greetings Everyone from Sancta Sophia, Continue reading on Medium »  ( 2 min )

When you have a fixed payload list, a fixed methodology, a fixed approach, then effectively penetration testing and bug bounty hunting are… Continue reading on Medium »  ( 2 min )

Hello Hackers, I’m MrEmpy I’m 16 and welcome to my first article about a critical bug I found on mobile. Continue reading on Medium »  ( 1 min )

Hello fellow Security researchers and beginners , in this blog I will be explaining the CORS vulnerability and how I found a potential… Continue reading on Medium »  ( 2 min )

Hi, I want to download a file directly from a friend computer, what's the most secure way to do it with an encrypted tunnel ? submitted by /u/Spare_Prize1148 [link] [comments]  ( 1 min )

Will be starting a new role in GRC in a couple of months time and wanted to see if anyone great reading sources to help hit the ground running. Currently reading the business minded CISO which has helped quite a bit! submitted by /u/SecMac [link] [comments]  ( 1 min )

Hi, I would like to ask a book advice to understand how operating systems memory level operations work. For example i want to understand how stack and heap level exploits work on both Windows and Linux systems and what security measures this operating systems have to prevent attacks like heap buffer overflow, process injection and hijacking etc. Where should I start to understand memory level operations on operating systems? Should I know programming languages like C because OSs mostly written in C? submitted by /u/execute_sh [link] [comments]  ( 1 min )

Hi, both Bitwarden and 1password are open source. Can anyone in the backend team has a way to look at our passwords? I mean the devs who made those apps must have a way whatsoever? Being double sure before using. What are your thoughts? submitted by /u/TheRealistDude [link] [comments]  ( 3 min )

Suppose a blackhat has gotten a victim's e-mail, banking, PayPal etc. account infos, how do they monetize this information without leaving a trail leading back to them? I can't make sense of this. Thanks. submitted by /u/DirectionProof710 [link] [comments]  ( 1 min )

Rocket.Chat disclosed a bug submitted by sectex: https://hackerone.com/reports/943737

Greetings Everyone from Sancta Sophia, Continue reading on Medium »  ( 2 min )

Greetings Everyone from Sancta Sophia, Continue reading on Medium »  ( 2 min )

https://theporngrid.com/Uploads/Media/ There's a combination of images and videos from a bunch of different original sources, mostly onlyfans and the like. Everything here is used by ibradome.com (NSFW) for their embedded content I indexed the files: https://gist.githubusercontent.com/RedDeadRandy/bda22a2b6014315597df2259a03815e2/raw/fe1ba95b5d2ec0d2a3e7ebcce96db21c1eda0152/theporngrid_files.txt Some of it is watermarked to find out who the person is while others are a crapshoot. submitted by /u/TattedUp [link] [comments]

submitted by /u/thats_dumberst [link] [comments]

http://nldslab.soe.ucsc.edu/charactercreator/film_corpus/film_20100519/all_imsdb_05_19_10/ submitted by /u/inoculatemedia [link] [comments]

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]  ( 1 min )

submitted by /u/JohnKeymanUK [link] [comments]

Back again with another Hacktoria geolocation walkthrough, this time on challenge 08. I must confess that took image took me a bit longer… Continue reading on Medium »  ( 7 min )

submitted by /u/CyberMasterV [link] [comments]

submitted by /u/JohnKeymanUK [link] [comments]  ( 1 min )

submitted by /u/digicat [link] [comments]  ( 1 min )

submitted by /u/rippatpop [link] [comments]  ( 1 min )

When looking for ways to bypass XSS sanitizing (sanitizing, not filtering), I’ve figured out something interesting but almost useless… Continue reading on Medium »  ( 2 min )

今日暂未更新资讯~ 更多最新文章，请访问SecWiki  ( 2 min )

We all have been sometime, someday in our professional life have used SysInternals Suite. I personally have used these utilities… Continue reading on Medium »  ( 2 min )

Now, following steps through part 1, we have lab setup and running. It is essential to understand how things are working in the background… Continue reading on Medium »  ( 4 min )

因遭到勒索软件的攻击，位于荷兰阿姆斯特丹和鹿特丹、比利时安特卫普的几处港口的石油装卸和转运受阻。  ( 1 min )

submitted by /u/dmchell [link] [comments]

Recently I’m dealing with a situation in which someone has edited the contents of a conversation in iMessages. I figured out how dates could be changed but now I want to know if it’s possible to make what’s saved to iCloud reflect what’s been created. submitted by /u/JasonTheTodd [link] [comments]  ( 1 min )

Hey, I was met with the following hypothetical scenario during school exam, to which my answer was insufficient. I'd love to hear your takes on it if you don't mind. "Bank's backup data were left unsecured on a public server. Propose a solution to protect data from being misused when this happens again." Thank you. submitted by /u/Ok-Cow-3198 [link] [comments]  ( 2 min )

I am trying to run a webserver on my computer that can be reached from the Internet. From what I understood, I would need to configure my router to allow the incoming http trafic to be forwarded to the webserver. However, for this to work, i would need to have a fixed public address, which is not the case for me.Is there a workaround to make this work without having to fix the IP on the ISP side? submitted by /u/spectnullbyte [link] [comments]  ( 3 min )

I imagine I need something better than just listing the tools I can use. But then again I don't want something as generic as "DNS enumeration" or "Vulnerability Assessment". I've got decent work experience but I'm lacking trying to think of what I can put in the technical skills part that is useful but not bullshittery. submitted by /u/thehunter699 [link] [comments]  ( 1 min )

Hey everyone! I just started to look into AD stuff and I have a few questions. I hope this is the right subreddit for AD related questions. If not, please direct me to the appropriate one. Questions: If I use LLMNR or IPv6 DNS Poisoning and get the NTLM hash of a local admin, I can use that hash or the cracked password to access the machine he's an admin on. If I manage to fetch the hash of a domain admin, I can log into any machine on the domain including the domain controller. What can I do if I get hash of a lowly domain user? I cannot log into any machine. Can I still authenticate against the DC to get infos like users, policies, etc? Does it make a difference if I only have the hash or the cracked password? If we are only a regular domain user all we can do to escalate our privileges is kerberoasting, correct? Like, we can't do pass the hash / pass the password because we can't get any from a machine. And we can't do token impersonation because, again, we can't get onto any machine. I want to thank everyone in advance for answering any of these questions. Please correct me if I misunderstood anything. I'm really new to AD pentesting. submitted by /u/placeholderbagholder [link] [comments]  ( 3 min )

Hi all, Going travelling around the world and will likely rely on Public WiFi Hotspots. Do I definitely need a VPN or just ensure I'm connecting to sites with HTTPS? Whatabout if I use celluar instead..? Do I need a VPN then? Please let me know your thoughts. Burge x submitted by /u/MyNamesBurge [link] [comments]  ( 3 min )

Article URL: https://www.sentinelone.com/labs/firefox-jit-use-after-frees-exploiting-cve-2020-26950/ Comments URL: https://news.ycombinator.com/item?id=30225843 Points: 1 # Comments: 0  ( 23 min )

IoT Devices Search Engine Continue reading on Medium »  ( 1 min )

Check out the following personal photos courtesy of Dancho Danchev which describe his experience in the information security industry. Continue reading on Medium »  ( 2 min )

I’ve been extremely tangentially following the Freedom Convoy activity as part of wider opposition-monitoring efforts, including… Continue reading on Medium »

as it was mention needed to find the camera model number, exif this image but found nothing. again after reviewing the image get to know… Continue reading on Medium »  ( 1 min )

Muy buenos días, tarde o noches estimados lectores, el día de hoy les traigo mi primer publicación en Medium, la resolución del room de… Continue reading on Medium »  ( 2 min )

Some notes on setting up both LLVM obfuscator and SysWhisper2 in Visual Studio 2019. Continue reading on Medium »  ( 2 min )

Introduction Often while configuring Active Directories, system admins don’t recognize the harm that comes with allowing a local administrator account on a system assigned to The post Domain Persistence: Computer Accounts appeared first on Hacking Articles.  ( 7 min )

what i know from my research is that different universities have different criteria like Calculus I and II but a basic undergrad IT course may not contain multiple maths topic like Computer science or engineering course does. So will bachelors in Information technology be enough to later apply as international student in different countries for Msc cyber forensics submitted by /u/axyut [link] [comments]  ( 2 min )

Introduction about SSRF attack can be read on separated medium post Beginner Guide To Exploit Server Side Request Forgery (SSRF)… Continue reading on InfoSec Write-ups »  ( 2 min )

Untuk mengetahui basic dari SSRF bisa membaca Beginner Guide To Exploit Server Side Request Forgery (SSRF) Vulnerability — Indonesia Continue reading on Medium »  ( 2 min )

This Blog is all about the CSRF Vulnerabilities and Lot more BOOM !!!!!!!!!! Continue reading on Medium »  ( 4 min )

Bug bounty hunting, a glamourous life of 100k bounties followed by Lamborghini pics on social media. If you are alive and in the part of… Continue reading on Medium »  ( 3 min )

Here is my write-up, I’m gonna tell you about my recent finding and my first IDOR(Insecure direct object references). Continue reading on Medium »  ( 2 min )

Hello All Continue reading on Medium »  ( 1 min )

submitted by /u/oniongrok [link] [comments]  ( 1 min )

submitted by /u/digicat [link] [comments]  ( 1 min )

submitted by /u/Tradition_Wonderful [link] [comments]  ( 1 min )

对Java反序列化数据绕WAF新姿势的补充 by ourren 连载：演化的高级威胁治理（五） by ourren 更多最新文章，请访问SecWiki  ( 2 min )

Article URL: https://www.lutasecurity.com/post/vulnerability-disclosure-programs-done-the-right-way Comments URL: https://news.ycombinator.com/item?id=30221511 Points: 2 # Comments: 0  ( 3 min )

Hello All Continue reading on Medium »  ( 1 min )

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]  ( 1 min )

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]

https://203.51.37.9:9802/Movies/ submitted by /u/WUGGAWUGGAWUGGA [link] [comments]

http://www.downloads.region10.dilg.gov.ph/ submitted by /u/WUGGAWUGGAWUGGA [link] [comments]

http://13.113.60.173:81/output/ submitted by /u/WUGGAWUGGAWUGGA [link] [comments]

http://dhakaftp.com/Data/ Lots of movies. Really good Download speeds. look for "English movies" or "Hollywood" in folders for movies in English. Try to take it easy as to not overwhelm the site. submitted by /u/soulkrypto [link] [comments]

submitted by /u/stereoroid [link] [comments]  ( 1 min )

Hello all, I recently discovered my router running DD-WRT has been hacked. What I mean by that is, I got an email from ISP about abuse which indicated my IP has been brute forcing ssh. I went to investigate and noticed my DD-WRT WebGUI is disabled and that my ESXI lab (which had default creds since it was a small lab and not exposed to internet) had been tampered with. I have removed power from the infected router and gotten back online with a cheap walmart backup, but I want to investigate this and get my infected router back online safely without losing evidence. Any DD-WRT advice would be appreciated as to how I should start my analysis. Thanks submitted by /u/the_grey_philosopher [link] [comments]  ( 2 min )

https://imgur.com/a/zSorMtG submitted by /u/Tqis [link] [comments]  ( 1 min )

Hey all, Here is a screen grab of ‘grep “Failed password” /var/log/auth.log’ for reference: https://imgur.com/a/G2bwrZO I have the port range 30999:59999 set to DENY IN from ANYWHERE for udp and tcp traffic, yet I’m still receiving login attempts within the ranges of blocked ports. Can anybody spot a misconfiguration, or perhaps explain what I’m missing with UFW? submitted by /u/OffishalFish [link] [comments]  ( 1 min )

Hi everyone, I remember that the NSA used to make the de facto hardening guide for Windows/AD environments. However, I can only find one relating to Windows Server 2000. Are there any modern versions of that relating to the Microsoft/Azure/AD environments from another trusted instance, not some company trying to sell a product? Thank you for all your support. submitted by /u/Adrixan [link] [comments]  ( 1 min )

So, I was practicing XXE labs on portswigger web sec academy and I came across a DTD payload with the characters "%" in the nested entities. I tried to find if there is a syntax specification for this in xml but found nothing regarding it, all I found by googling this are just some more xml payloads. So, anybody have any idea what these characters exactly are and what they do? I am thinking like these are only used in nested entity definitions, is that correct? I am totally confused. Any help would be greatly appreciated. ​ PS: I am a complete newbie. So, if this is a stupid question forgive me! submitted by /u/DeadTree_22 [link] [comments]  ( 1 min )

I did not know that daemon is pronounced demon. Maybe someone else will see this and learn too. submitted by /u/lowkiwatchingyou [link] [comments]  ( 2 min )

The moment I opt in my college first year (1st sem), The college gave us the syllabus of C, I'm pretty bad at it cuz C isn't something that I had dealt firsthand in the last year and tbh I'm a python kinda guy I only worked with python so C isn't a area of my interest. So my question is that Do I need to be too good at C is it gonna be relevant somehow later in hacking field? submitted by /u/The_Intellectualist [link] [comments]  ( 2 min )

In newer versions of edge filelinks (e.g. to a unc path) are blocked by default. Are there any security issues allowing filelinks for secure intranet zones? It can be activated via policy https://docs.microsoft.com/en-us/deployedge/microsoft-edge-policies Thanks! submitted by /u/montyspinneratz [link] [comments]

I understand that my terminology might be a bit out of date. It's been a while, I know to research on my own. I want to know, though, what the best advice on here is for cracking 802.11 networks, and such things., Last i checked it was the ALFA AWUS 036 N card, I have one, and then they released the 802.11n version. What is the gold standard these days? The best I can tell, is actually nothing - with a strong password, WPA-2, modern encryption... What are we dealing with these days? I still have my ALFA card and several other 802.11n card that can inject packets. Just feel like there has been a lot of fragmentation over the last decade and really, any opinions on whether or not the whole "WiFi hacking" gig is dead, well, I want your thoughts. submitted by /u/ValerieVexen [link] [comments]  ( 1 min )

Article URL: https://apiiro.com/blog/malicious-kubernetes-helm-charts-can-be-used-to-steal-sensitive-information-from-argo-cd-deployments/ Comments URL: https://news.ycombinator.com/item?id=30212283 Points: 1 # Comments: 0  ( 6 min )

Article URL: https://apiiro.com/blog/malicious-kubernetes-helm-charts-can-be-used-to-steal-sensitive-information-from-argo-cd-deployments/ Comments URL: https://news.ycombinator.com/item?id=30204744 Points: 3 # Comments: 0  ( 6 min )

submitted by /u/Nhamatanda [link] [comments]

submitted by /u/stargravy [link] [comments]  ( 1 min )

submitted by /u/jaymzu [link] [comments]

submitted by /u/anvilventures [link] [comments]  ( 2 min )

submitted by /u/dalmoz [link] [comments]

Introduction Anubis is an “insane” level CTF box available on the HackTheBox platform designed by 4ndr34z. The box covers a real-life scenario of initial exploitation The post Anubis HackTheBox Walkthrough appeared first on Hacking Articles.  ( 12 min )

IBM disclosed a bug submitted by smokin-ac3z: https://hackerone.com/reports/410334

Ruby disclosed a bug submitted by chinarulezzz: https://hackerone.com/reports/1168205

Let’s see how it goes Continue reading on Medium »  ( 2 min )

Few words on Threat Modelling. Continue reading on Medium »

What is owasp ? Continue reading on Medium »  ( 3 min )

Business Logic (İş Mantığı) zafiyeti, bir web uygulamasının tasarımında ve uygulamasında, saldırganın istenmeyen davranışlar sergilemesine… Continue reading on Medium »  ( 15 min )

今日暂未更新资讯~ 更多最新文章，请访问SecWiki  ( 2 min )

APIs are a crucial part of modern web application development and make up a large chunk of your total web attack surface. Learn how Invicti helps organizations make API vulnerability testing an integral part of their secure SDLC. READ MORE  ( 4 min )

On Jan 23, 2022, Quiztime (contributor @SEINT_pl) shared a new OSINT quiz with us. Continue reading on Medium »  ( 2 min )

Do you want to become famous? Did you know that an OSINT conducted today is a tax payer’s buck saved somewhere? Keep reading. Continue reading on Medium »  ( 8 min )

C2作为名词来讲，是指APT组织掌握的基础设施，也就是IP、域名、URL。  ( 1 min )

Article URL: https://apiiro.com/blog/malicious-kubernetes-helm-charts-can-be-used-to-steal-sensitive-information-from-argo-cd-deployments/ Comments URL: https://news.ycombinator.com/item?id=30204744 Points: 3 # Comments: 0  ( 6 min )

Article URL: https://lists.infradead.org/pipermail/hostap/2022-January/040148.html Comments URL: https://news.ycombinator.com/item?id=30200900 Points: 1 # Comments: 0  ( 3 min )

Difficulty: Medium Room  Description: No logs, no crime… so says the lumberjack.  ( 3 min )

Art of Psychological manipulation  ( 2 min )

Hi, amazing fellow hackers, I produced an interesting topic web content discovery. It is useful in bug bounty and the most important thing…  ( 3 min )

Get all the writeups from Day 1 to 20, Click Here Or Click Here.  ( 3 min )

Difficulty: Medium Room  Description: No logs, no crime… so says the lumberjack.  ( 3 min )

Art of Psychological manipulation  ( 2 min )

Hi, amazing fellow hackers, I produced an interesting topic web content discovery. It is useful in bug bounty and the most important thing…  ( 3 min )

Get all the writeups from Day 1 to 20, Click Here Or Click Here.  ( 3 min )

Article URL: https://reload4j.qos.ch/news.html Comments URL: https://news.ycombinator.com/item?id=30200504 Points: 2 # Comments: 0  ( 1 min )

Article URL: https://www.youtube.com/watch?v=kvREvOvSWt4 Comments URL: https://news.ycombinator.com/item?id=30190779 Points: 1 # Comments: 0

submitted by /u/baghdadcafe [link] [comments]  ( 1 min )

Hello, I am interested if there is tool/software that will help me analyze logs from web server, ssh and Mysql for intrusion, but on another PC. So I basically want to pull logs from many servers and run them trough some software that can detect possible SQLi or path traversal attempts, something like that. I know there is Snort and SIEMs but is there any software that will use for example Snorts engine and rules to do this analysis offline ? Or can I run snort on some log file from other server? P.S. possibly open source. Thanks. submitted by /u/P-e-t-a-r [link] [comments]  ( 5 min )

Hi Guys. I like OneNote, and my org blocks anything else, I use it at work and at home. Three questions: If I login to my work OneNote account, on my personal Mac/Win/Linux computers, can my work track my computers at all, or see it's MAC address or name? If I login to my personal OneNote account on my work computer, can they read my OneNotes? Do the answers to the above two questions apply for all of OneDrive too? Appreciate any responses as I've been told that it's all pretty private so I should be good to go with either. submitted by /u/bloqs [link] [comments]  ( 3 min )

https://e4ftl01.cr.usgs.gov/ASTT/ ​ Some sort of unsecured government website. submitted by /u/Main_Force_Patrol [link] [comments]

https://bornless.grotto.faith/pages/ https://bornless.grotto.faith/images/ submitted by /u/EmuAnon34 [link] [comments]

http://rmeyer.comelitdns.com/Music/MOZART%20225/ submitted by /u/Appropriate-You-6065 [link] [comments]  ( 1 min )

submitted by /u/millhouse187 [link] [comments]  ( 1 min )

submitted by /u/josephalbright1 [link] [comments]

Several blogs from some J-Pop groups were deleted but the photos remain on ameba's servers. I have found a few (https://stat.ameba.jp/user_images/82/56/10138975701.jpg) but would like to search images I have in low quality on this site. submitted by /u/Alarod [link] [comments]

In April 2021, Balancer Labs decided to go big in pursuit of uncovering vulnerabilities in their V2 Vault architecture with the launch of… Continue reading on Balancer Protocol »  ( 2 min )

Hoje vou falar um pouco de uma falha que me levou a dois relatórios infelizmente ambos foram duplicados porém ficou de experiência e… Continue reading on Medium »  ( 2 min )

At Immunefi, we receive a large number of reports from whitehats regarding subdomain takeovers. But we have a policy of always marking… Continue reading on Immunefi »  ( 3 min )

First Of all I’ll Describe What is Pass-The-Hash Attack Continue reading on Medium »  ( 1 min )

submitted by /u/CyberMasterV [link] [comments]

submitted by /u/jeanc0re [link] [comments]  ( 1 min )

submitted by /u/crower [link] [comments]  ( 1 min )

submitted by /u/Jazzlike-Resource500 [link] [comments]

i have an interview coming up soon. What sort of technical questions /scenario questions should I be expecting? Thx submitted by /u/tfulab23 [link] [comments]  ( 2 min )